2024-02-07 17:05:50 +00:00
|
|
|
id: easyjob-panel
|
|
|
|
|
|
|
|
|
|
info:
|
2024-02-08 01:34:50 +00:00
|
|
|
name: EasyJOB Login Panel - Detect
|
2024-02-07 17:05:50 +00:00
|
|
|
author: righettod
|
|
|
|
|
severity: info
|
|
|
|
|
description: |
|
|
|
|
|
EasyJOB login panel was detected.
|
|
|
|
|
reference:
|
|
|
|
|
- https://www.en.because-software.com/software/easyjob/
|
|
|
|
|
metadata:
|
|
|
|
|
verified: true
|
|
|
|
|
shodan-query: http.title:"Log in - easyJOB"
|
|
|
|
|
tags: panel,easyjob,login
|
|
|
|
|
|
|
|
|
|
http:
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- "{{BaseURL}}/easy/app/Account/Login"
|
|
|
|
|
|
|
|
|
|
matchers:
|
|
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
|
|
|
|
- 'status_code == 200'
|
|
|
|
|
- 'contains(body, "easyJOB") && contains(body, "/easy/app/") && contains(body, "because-software.com")'
|
|
|
|
|
condition: and
|
|
|
|
|
|
|
|
|
|
extractors:
|
|
|
|
|
- type: regex
|
|
|
|
|
part: body
|
|
|
|
|
group: 1
|
|
|
|
|
regex:
|
2024-02-08 01:34:50 +00:00
|
|
|
- 'easyJOB\s+([0-9.]+)'
|
2024-02-08 05:18:20 +00:00
|
|
|
# digest: 4a0a004730450220411982e48718601305b05a93c91be6a680ce993e5e110400b0dabbff753fe0bb02210091af5cbecc2fd766de347dad93c4a3e105a0d3f5a4a8f7a002bdb838c3bc2fad:922c64590222798bb761d5b6d8e72950
|
