nuclei-templates/http/exposed-panels/openx-panel.yaml

id: openx-panel

info:
  name: OpenX/Revive Adserver Login Panel - Detect
  author: pikpikcu,righettod
  severity: info
  description: OpenX login panel was detected. Note that OpenX is now a Revive Adserver.
  reference:
    - https://www.revive-adserver.com/download/
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
    verified: true
    max-request: 2
    vendor: revive-adserver
    product: revive_adserver
    shodan-query: title:"Revive Adserver"
  tags: panel,openx,revive,adserver,login

http:
  - method: GET
    path:
      - "{{BaseURL}}/www/admin/index.php"
      - "{{BaseURL}}/admin/index.php"

    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: regex
        part: body
        regex:
          - '<title>OpenX</title>'
          - '<title>Revive Adserver</title>'
        condition: or

      - type: status
        status:
          - 200

    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - '(.*)- http://www.openx.org'

      - type: regex
        part: body
        group: 1
        regex:
          - 'v=([0-9a-z.\-]+)'
# digest: 4a0a00473045022100c4867295de1f9ba3262a6d2257ce851426240253904833de6205f02c04a1f7c1022008474e3470b69e7f99e6cef7f2e408629bdeb630d8fdeff2e11979f89842867b:922c64590222798bb761d5b6d8e72950
Seperate tech and exposed-panels (#3634) * Seperate tech and exposed-panels * Update phpcollab-panel.yaml * Update wondercms-detect.yaml * Update xxljob-panel.yaml * Update yzmcms-panel.yaml * workflow fixes Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> Co-authored-by: sandeep <sandeep@projectdiscovery.io> 2022-01-31 07:56:08 +00:00			`id: openx-panel`
Create openx-detect.yaml 2021-07-28 05:20:31 +00:00
			`info:`
Update openx-panel.yaml 2024-02-02 18:03:58 +00:00			`name: OpenX/Revive Adserver Login Panel - Detect`
Add more detection criteria 2024-02-02 10:50:39 +00:00			`author: pikpikcu,righettod`
Create openx-detect.yaml 2021-07-28 05:20:31 +00:00			`severity: info`
Update openx-panel.yaml 2024-02-02 18:03:58 +00:00			`description: OpenX login panel was detected. Note that OpenX is now a Revive Adserver.`
templateman update 2023-10-14 11:27:55 +00:00			`reference:`
			`- https://www.revive-adserver.com/download/`
Dashboard Content Enhancements (#6219) Dashboard Content Enhancements 2022-12-02 21:24:17 +00:00			`classification:`
			`cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N`
templateman update 2023-10-14 11:27:55 +00:00			`cvss-score: 0`
Dashboard Content Enhancements (#6219) Dashboard Content Enhancements 2022-12-02 21:24:17 +00:00			`cwe-id: CWE-200`
Seperate tech and exposed-panels (#3634) * Seperate tech and exposed-panels * Update phpcollab-panel.yaml * Update wondercms-detect.yaml * Update xxljob-panel.yaml * Update yzmcms-panel.yaml * workflow fixes Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> Co-authored-by: sandeep <sandeep@projectdiscovery.io> 2022-01-31 07:56:08 +00:00			`metadata:`
TemplateMan Update [Sat Mar 23 09:28:19 UTC 2024] :robot: 2024-03-23 09:28:19 +00:00			`verified: true`
			`max-request: 2`
Add mass vendor and product info to templates 2024-02-22 00:55:04 +00:00			`vendor: revive-adserver`
			`product: revive_adserver`
Update openx-panel.yaml 2024-02-02 18:03:58 +00:00			`shodan-query: title:"Revive Adserver"`
Add more detection criteria 2024-02-02 10:50:39 +00:00			`tags: panel,openx,revive,adserver,login`
Create openx-detect.yaml 2021-07-28 05:20:31 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Create openx-detect.yaml 2021-07-28 05:20:31 +00:00			`- method: GET`
			`path:`
Seperate technology template (#3430) * Edit magmi workflow * Add some workflow template + edit some template * Changing some templates * minor update * workflow matcher fixes * tech update * Seperate technology template * Update metabase-panel.yaml * Update lucee-detect.yaml * Update oneblog-detect.yaml * Update dolibarr-panel.yaml * Update dolibarr-panel.yaml * Update dolibarr-panel.yaml * Update gespage-panel.yaml * Update gespage-panel.yaml * Update mautic-crm-panel.yaml * Update kibana-panel.yaml * Update metabase-panel.yaml * Update home-assistant-detect.yaml * Update jitsi-meet-detect.yaml * Update lucee-detect.yaml * Update gotmls-plugin-lfi.yaml * Update and rename technologies/opencast-detect.yaml to exposed-panels/opencast-detect.yaml * duplicate template - cves/2020/CVE-2020-11738.yaml Co-authored-by: sandeep <sandeep@projectdiscovery.io> Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> 2021-12-31 12:27:46 +00:00			`- "{{BaseURL}}/www/admin/index.php"`
			`- "{{BaseURL}}/admin/index.php"`
Create openx-detect.yaml 2021-07-28 05:20:31 +00:00
Seperate technology template (#3430) * Edit magmi workflow * Add some workflow template + edit some template * Changing some templates * minor update * workflow matcher fixes * tech update * Seperate technology template * Update metabase-panel.yaml * Update lucee-detect.yaml * Update oneblog-detect.yaml * Update dolibarr-panel.yaml * Update dolibarr-panel.yaml * Update dolibarr-panel.yaml * Update gespage-panel.yaml * Update gespage-panel.yaml * Update mautic-crm-panel.yaml * Update kibana-panel.yaml * Update metabase-panel.yaml * Update home-assistant-detect.yaml * Update jitsi-meet-detect.yaml * Update lucee-detect.yaml * Update gotmls-plugin-lfi.yaml * Update and rename technologies/opencast-detect.yaml to exposed-panels/opencast-detect.yaml * duplicate template - cves/2020/CVE-2020-11738.yaml Co-authored-by: sandeep <sandeep@projectdiscovery.io> Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> 2021-12-31 12:27:46 +00:00			`stop-at-first-match: true`
Added missing condition 2021-08-02 18:44:33 +00:00			`matchers-condition: and`
Create openx-detect.yaml 2021-07-28 05:20:31 +00:00			`matchers:`
			`- type: regex`
			`part: body`
			`regex:`
			`- '<title>OpenX</title>'`
Add more detection criteria 2024-02-02 10:50:39 +00:00			`- '<title>Revive Adserver</title>'`
Update openx-panel.yaml 2024-02-02 18:03:58 +00:00			`condition: or`
Create openx-detect.yaml 2021-07-28 05:20:31 +00:00
Update openx-detect.yaml 2021-07-28 17:58:57 +00:00			`- type: status`
			`status:`
			`- 200`

Create openx-detect.yaml 2021-07-28 05:20:31 +00:00			`extractors:`
			`- type: regex`
			`part: body`
			`group: 1`
			`regex:`
Seperate technology template (#3430) * Edit magmi workflow * Add some workflow template + edit some template * Changing some templates * minor update * workflow matcher fixes * tech update * Seperate technology template * Update metabase-panel.yaml * Update lucee-detect.yaml * Update oneblog-detect.yaml * Update dolibarr-panel.yaml * Update dolibarr-panel.yaml * Update dolibarr-panel.yaml * Update gespage-panel.yaml * Update gespage-panel.yaml * Update mautic-crm-panel.yaml * Update kibana-panel.yaml * Update metabase-panel.yaml * Update home-assistant-detect.yaml * Update jitsi-meet-detect.yaml * Update lucee-detect.yaml * Update gotmls-plugin-lfi.yaml * Update and rename technologies/opencast-detect.yaml to exposed-panels/opencast-detect.yaml * duplicate template - cves/2020/CVE-2020-11738.yaml Co-authored-by: sandeep <sandeep@projectdiscovery.io> Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> 2021-12-31 12:27:46 +00:00			`- '(.*)- http://www.openx.org'`
TemplateMan Update [Fri Oct 20 11:41:12 UTC 2023] :robot: 2023-10-20 11:41:13 +00:00
Add more detection criteria 2024-02-02 10:50:39 +00:00			`- type: regex`
			`part: body`
			`group: 1`
			`regex:`
			`- 'v=([0-9a-z.\-]+)'`
Auto Template Signing [Mon Mar 25 11:57:16 UTC 2024] :robot: 2024-03-25 11:57:16 +00:00			`# digest: 4a0a00473045022100c4867295de1f9ba3262a6d2257ce851426240253904833de6205f02c04a1f7c1022008474e3470b69e7f99e6cef7f2e408629bdeb630d8fdeff2e11979f89842867b:922c64590222798bb761d5b6d8e72950`