Update mikrotik-routeros.yaml

patch-1
Dhiyaneshwaran 2022-12-02 15:59:41 +05:30 committed by GitHub
parent a19df4d0c2
commit 043f338ad3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 30 deletions

View File

@ -8,7 +8,8 @@ info:
- https://systemweakness.com/routeros-user-with-just-ftp-policy-can-write-to-filesystem-cve-2021-27221-e3e45d780dfe
metadata:
verified: true
tags: panel,login
shodan-query: title:"RouterOS router configuration page"
tags: panel,login,mikrotik
requests:
- method: GET
@ -18,7 +19,7 @@ requests:
- '{{BaseURL}}/graphs/'
stop-at-first-match: true
matchers-condition: or
matchers-condition: and
matchers:
- type: word
name: router
@ -28,35 +29,8 @@ requests:
- '<title>RouterOS router configuration page</title>'
condition: and
- type: word
name: router-old
part: body
words:
- '<title>mikrotik routeros > administration</title>'
- '<title>Mikrotik Router'
- '<img src="/webcfg/'
- '<title>MikroTik RouterOS Managing Webpage</title>'
condition: or
- type: word
name: hotspot
part: body
words:
- 'Please log on to use the mikrotik hotspot service'
- 'mikrotik hotspot > login'
condition: and
- type: word
name: mikrotik-httpproxy
part: header
words:
- "Server: mikrotik httpproxy"
extractors:
- type: regex
group: 1
regex:
- "<h1>RouterOS (.+)</h1>"
- '<div class="top">mikrotik routeros (.[0-9.]+) configuration page</div>'
- 'routeros (.[0-9.]+) '
- '<b>MikroTik RouterOS (.[0-9.]+)</b>'
- '<h1>RouterOS (.+)</h1>'