2024-02-07 17:05:50 +00:00
|
|
|
id: easyjob-panel
|
|
|
|
|
|
|
|
|
|
info:
|
2024-02-08 01:34:50 +00:00
|
|
|
name: EasyJOB Login Panel - Detect
|
2024-02-07 17:05:50 +00:00
|
|
|
author: righettod
|
|
|
|
|
severity: info
|
|
|
|
|
description: |
|
2024-03-04 08:20:22 +00:00
|
|
|
EasyJOB login panel was detected.
|
2024-02-07 17:05:50 +00:00
|
|
|
reference:
|
|
|
|
|
- https://www.en.because-software.com/software/easyjob/
|
|
|
|
|
metadata:
|
2024-04-08 11:30:07 +00:00
|
|
|
verified: true
|
2024-03-04 08:20:22 +00:00
|
|
|
max-request: 1
|
2024-03-26 08:03:04 +00:00
|
|
|
shodan-query: http.title:"Log in - easyJOB"
|
2024-02-07 17:05:50 +00:00
|
|
|
tags: panel,easyjob,login
|
|
|
|
|
|
|
|
|
|
http:
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- "{{BaseURL}}/easy/app/Account/Login"
|
|
|
|
|
|
|
|
|
|
matchers:
|
|
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
|
|
|
|
- 'status_code == 200'
|
|
|
|
|
- 'contains(body, "easyJOB") && contains(body, "/easy/app/") && contains(body, "because-software.com")'
|
|
|
|
|
condition: and
|
|
|
|
|
|
|
|
|
|
extractors:
|
|
|
|
|
- type: regex
|
|
|
|
|
part: body
|
|
|
|
|
group: 1
|
|
|
|
|
regex:
|
2024-02-08 01:34:50 +00:00
|
|
|
- 'easyJOB\s+([0-9.]+)'
|
2024-03-26 08:05:26 +00:00
|
|
|
# digest: 4b0a00483046022100983db9c387a5612277a7b250c8c8f0ffb74961f618b76ac21d4356615a5f5ef2022100aba93e494fa559c7410095129601d88d8712687ca1649b5335ef8d067143e661:922c64590222798bb761d5b6d8e72950
|
