nuclei-templates/http/exposed-panels/openam-panel.yaml

id: openam-panel

info:
  name: OpenAM Login Panel - Detect
  author: philippedelteil
  severity: info
  description: OpenAM login panel was detected.
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
    cpe: cpe:2.3:a:forgerock:openam:*:*:*:*:*:*:*:*
  metadata:
    max-request: 20
    vendor: forgerock
    product: openam
    shodan-query:
      - http.title:"OpenAM"
      - http.title:"openam"
    fofa-query: title="openam"
    google-query: intitle:"openam"
  tags: panel,openam,opensso,login,forgerock

http:
  - method: GET
    path:
      - "{{BaseURL}}{{paths}}"
    payloads:
      paths:
        - "/openam/XUI"
        - "/XUI"
        - "/XUI/#login"
        - "/UI"
        - "/sso/XUI"
        - "/sso/UI"
        - "/sso/UI/#login"
        - "/opensso/UI/Login"
        - "/openam/UI/login"
        - "/openam/UI/#loginlogin"
        - "/openam/UI/Login"
        - "/openam/XUI/Login"
        - "/openam/XUI/login"
        - "/openam/XUI/#login"
        - "/am/UI/Login"
        - "/am/UI/#login"
        - "/am/XUI/"
        - "/am/XUI/Login"
        - "/am/json/serverinfo/*"
        - "/openam/json/serverinfo/*"

    host-redirects: true
    stop-at-first-match: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        words:
          - 'urlArgs: "v='
          - 'Sign in to OpenAM'
          - 'ForgeRock'
          - 'forgerock'
          - 'FRForgotUsername'
          - 'successfulUserRegistrationDestination'
        condition: or

      - type: status
        status:
          - 200

    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - 'urlArgs: "v=([0-9.abcd]+)'
# digest: 490a0046304402206816d92b97ae6654f7315a4fb330d4a9848c5a69acd7164e0c41de8cec4b491e02201a4cb990cd9c9c471627c1fc20267e93696f76b4d99e5e06f59f1a511280cbdb:922c64590222798bb761d5b6d8e72950
Seperate tech and exposed-panels (#3634) * Seperate tech and exposed-panels * Update phpcollab-panel.yaml * Update wondercms-detect.yaml * Update xxljob-panel.yaml * Update yzmcms-panel.yaml * workflow fixes Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> Co-authored-by: sandeep <sandeep@projectdiscovery.io> 2022-01-31 07:56:08 +00:00			`id: openam-panel`
Updated to openam-detection 2021-03-14 18:57:59 +00:00
			`info:`
Dashboard Content Enhancements (#6219) Dashboard Content Enhancements 2022-12-02 21:24:17 +00:00			`name: OpenAM Login Panel - Detect`
misc updates 2021-07-23 17:16:55 +00:00			`author: philippedelteil`
Updated to openam-detection 2021-03-14 18:57:59 +00:00			`severity: info`
Dashboard Content Enhancements (#6219) Dashboard Content Enhancements 2022-12-02 21:24:17 +00:00			`description: OpenAM login panel was detected.`
			`classification:`
			`cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N`
			`cwe-id: CWE-200`
Add CPE classification to templates (#9420) * Add CPE classification to templates * misc fix * added tags * format updates * Revert "format updates" This reverts commit b93658be4b50c929d15082258e4d11a15b12cbd8. --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2024-03-26 08:03:04 +00:00			`cpe: cpe:2.3:a:forgerock:openam::::::::`
Seperate tech and exposed-panels (#3634) * Seperate tech and exposed-panels * Update phpcollab-panel.yaml * Update wondercms-detect.yaml * Update xxljob-panel.yaml * Update yzmcms-panel.yaml * workflow fixes Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> Co-authored-by: sandeep <sandeep@projectdiscovery.io> 2022-01-31 07:56:08 +00:00			`metadata:`
TemplateMan Update [Sat Mar 23 09:28:19 UTC 2024] :robot: 2024-03-23 09:28:19 +00:00			`max-request: 20`
Revert "TemplateMan Update [Mon Apr 8 11:30:07 UTC 2024] :robot:" This reverts commit 433dda4ae5b824564b44075bb95a96ecdbe263a6. 2024-04-08 11:34:33 +00:00			`vendor: forgerock`
TemplateMan Update [Fri Jun 7 10:04:28 UTC 2024] :robot: 2024-06-07 10:04:29 +00:00			`product: openam`
			`shodan-query:`
			`- http.title:"OpenAM"`
			`- http.title:"openam"`
			`fofa-query: title="openam"`
			`google-query: intitle:"openam"`
Add CPE classification to templates (#9420) * Add CPE classification to templates * misc fix * added tags * format updates * Revert "format updates" This reverts commit b93658be4b50c929d15082258e4d11a15b12cbd8. --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2024-03-26 08:03:04 +00:00			`tags: panel,openam,opensso,login,forgerock`
Updated to openam-detection 2021-03-14 18:57:59 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Updated to openam-detection 2021-03-14 18:57:59 +00:00			`- method: GET`
			`path:`
feat: convert paths with lots of elements to payloads 2024-04-12 10:31:51 +00:00			`- "{{BaseURL}}{{paths}}"`
			`payloads:`
			`paths:`
			`- "/openam/XUI"`
			`- "/XUI"`
			`- "/XUI/#login"`
			`- "/UI"`
			`- "/sso/XUI"`
			`- "/sso/UI"`
			`- "/sso/UI/#login"`
			`- "/opensso/UI/Login"`
			`- "/openam/UI/login"`
			`- "/openam/UI/#loginlogin"`
			`- "/openam/UI/Login"`
			`- "/openam/XUI/Login"`
			`- "/openam/XUI/login"`
			`- "/openam/XUI/#login"`
			`- "/am/UI/Login"`
			`- "/am/UI/#login"`
			`- "/am/XUI/"`
			`- "/am/XUI/Login"`
			`- "/am/json/serverinfo/*"`
			`- "/openam/json/serverinfo/*"`
Update openam-detection.yaml 2021-07-09 20:06:54 +00:00
Using "host-redirects" instead of "redirects" to avoid scanning 3rd party / out of scope hosts. (#5491) 2022-10-07 21:27:25 +00:00			`host-redirects: true`
Update openam-detection.yaml updated using new flag stop-at-first-match: true 2021-09-01 16:18:30 +00:00			`stop-at-first-match: true`
Update openam-detection.yaml 2021-07-07 06:35:01 +00:00			`max-redirects: 2`
templateman update 2023-10-14 11:27:55 +00:00
Update openam-detection.yaml 2021-07-07 06:35:01 +00:00			`matchers-condition: and`
Updated to openam-detection 2021-03-14 18:57:59 +00:00			`matchers:`
Update openam-detection.yaml 2021-07-07 06:35:01 +00:00			`- type: word`
			`words:`
Dashboard Content Enhancements (#6219) Dashboard Content Enhancements 2022-12-02 21:24:17 +00:00			`- 'urlArgs: "v='`
Update openam-detection.yaml 2021-07-07 06:35:01 +00:00			`- 'Sign in to OpenAM'`
			`- 'ForgeRock'`
			`- 'forgerock'`
			`- 'FRForgotUsername'`
			`- 'successfulUserRegistrationDestination'`
			`condition: or`
Update openam-detection.yaml 2021-07-09 20:06:54 +00:00
Update openam-detection.yaml 2021-07-07 06:35:01 +00:00			`- type: status`
			`status:`
			`- 200`
Update openam-detection.yaml 2021-07-09 20:06:54 +00:00
Update openam-detection.yaml 2021-07-07 06:35:01 +00:00			`extractors:`
			`- type: regex`
			`part: body`
			`group: 1`
			`regex:`
Dashboard Content Enhancements (#6219) Dashboard Content Enhancements 2022-12-02 21:24:17 +00:00			`- 'urlArgs: "v=([0-9.abcd]+)'`
Auto Template Signing [Fri Apr 12 10:58:46 UTC 2024] :robot: 2024-04-12 10:58:47 +00:00			`# digest: 490a0046304402206816d92b97ae6654f7315a4fb330d4a9848c5a69acd7164e0c41de8cec4b491e02201a4cb990cd9c9c471627c1fc20267e93696f76b4d99e5e06f59f1a511280cbdb:922c64590222798bb761d5b6d8e72950`