2023-12-12 20:20:01 +00:00
|
|
|
id: woodwing-panel
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: Woodwing Studio Server - Panel
|
|
|
|
|
author: pdteam
|
|
|
|
|
severity: info
|
|
|
|
|
reference:
|
|
|
|
|
- https://twitter.com/ynsmroztas/status/1680961398011047936
|
|
|
|
|
metadata:
|
2024-03-26 08:03:04 +00:00
|
|
|
fofa-query: title=="WoodWing Studio Server"
|
2024-01-14 13:49:27 +00:00
|
|
|
max-request: 2
|
2023-12-12 20:20:01 +00:00
|
|
|
shodan-query: http.title:"WoodWing Studio Server"
|
|
|
|
|
tags: woodwing,panel
|
|
|
|
|
|
|
|
|
|
http:
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- "{{BaseURL}}/StudioServer/server/apps/login.php"
|
|
|
|
|
- "{{BaseURL}}/server/apps/login.php"
|
|
|
|
|
|
|
|
|
|
stop-at-first-match: true
|
|
|
|
|
redirects: true
|
|
|
|
|
max-redirects: 2
|
|
|
|
|
matchers:
|
|
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
2023-12-13 09:19:58 +00:00
|
|
|
- "contains(tolower(body), 'woodwing studio server')"
|
2024-03-26 08:05:26 +00:00
|
|
|
# digest: 490a0046304402206a7fb60538317b9bd03b2b324d6d05aed490f861a2805e6d469a05e63792fe4d02200128fb2676adbd201693425bb4a593f6ad33ecc6a3f6577f01ba0f9cf1ca72fd:922c64590222798bb761d5b6d8e72950
|
