2024-02-07 17:05:50 +00:00
|
|
|
id: easyjob-panel
|
|
|
|
|
|
|
|
|
|
info:
|
2024-02-08 01:34:50 +00:00
|
|
|
name: EasyJOB Login Panel - Detect
|
2024-02-07 17:05:50 +00:00
|
|
|
author: righettod
|
|
|
|
|
severity: info
|
|
|
|
|
description: |
|
2024-03-04 08:20:22 +00:00
|
|
|
EasyJOB login panel was detected.
|
2024-02-07 17:05:50 +00:00
|
|
|
reference:
|
|
|
|
|
- https://www.en.because-software.com/software/easyjob/
|
|
|
|
|
metadata:
|
|
|
|
|
verified: true
|
2024-03-04 08:20:22 +00:00
|
|
|
max-request: 1
|
2024-03-23 09:28:19 +00:00
|
|
|
shodan-query: "http.title:\"Log in - easyJOB\""
|
2024-02-07 17:05:50 +00:00
|
|
|
tags: panel,easyjob,login
|
|
|
|
|
|
|
|
|
|
http:
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- "{{BaseURL}}/easy/app/Account/Login"
|
|
|
|
|
|
|
|
|
|
matchers:
|
|
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
|
|
|
|
- 'status_code == 200'
|
|
|
|
|
- 'contains(body, "easyJOB") && contains(body, "/easy/app/") && contains(body, "because-software.com")'
|
|
|
|
|
condition: and
|
|
|
|
|
|
|
|
|
|
extractors:
|
|
|
|
|
- type: regex
|
|
|
|
|
part: body
|
|
|
|
|
group: 1
|
|
|
|
|
regex:
|
2024-02-08 01:34:50 +00:00
|
|
|
- 'easyJOB\s+([0-9.]+)'
|
2024-03-04 09:35:31 +00:00
|
|
|
# digest: 4a0a00473045022100f82e7fbb4c360cb536e24b99b8f65c91e8d46ebbc0f45a156d6074c154e202a402203334ffeaa0ca0e92f85d5ddcfd516f44ec9fbc55655b5351d2e193726e2b2248:922c64590222798bb761d5b6d8e72950
|
