nuclei-templates/http/exposed-panels/ocomon-panel.yaml

50 lines
1.2 KiB
YAML
Raw Normal View History

id: ocomon-panel
info:
name: OcoMon Login Panel - Detect
author: dogasantos
severity: info
description: a tiny helpdesk system written in php
reference:
- https://sourceforge.net/projects/ocomonphp/
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
cpe: cpe:2.3:a:ocomon_project:ocomon:*:*:*:*:*:*:*:*
2023-10-14 11:27:55 +00:00
metadata:
verified: true
2023-10-14 11:27:55 +00:00
max-request: 1
vendor: ocomon_project
product: ocomon
shodan-query:
- http.html:"OcoMon"
- http.html:"ocomon"
fofa-query: body="ocomon"
tags: panel,ocomon,oss,ocomon_project
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 2
2023-10-14 11:27:55 +00:00
matchers-condition: and
matchers:
- type: regex
regex:
- '(?i)(OcoMon)'
- type: word
part: body
words:
- 'open_form/ticket_form_open.php'
extractors:
- type: regex
group: 1
regex:
- 'Versão: ([0-9.]+)'
- 'Versão: ([0-9.]+)'
# digest: 490a00463044022058a1270e9f4f60367da06e1e9ac6d393b37c492a6af5a21104464a797c19562002204777750de6e2f2b380a5c8c480a65ea3236a0ff7255d63b8e91798265f6fbaa8:922c64590222798bb761d5b6d8e72950