diff --git a/exposed-panels/microsoft-exchange-control-panel.yaml b/exposed-panels/microsoft-exchange-control-panel.yaml new file mode 100644 index 0000000000..5aa1d49d68 --- /dev/null +++ b/exposed-panels/microsoft-exchange-control-panel.yaml @@ -0,0 +1,24 @@ +id: microsoft-exchange-control-panel + +info: + name: Microsoft Exchange Control Panel + author: r3dg33k + severity: info + description: Publicly accessible Microsoft Exchange Server Control Panel + tags: microsoft,panel + reference: https://docs.microsoft.com/en-us/answers/questions/58814/block-microsoft-exchange-server-2016-exchange-admi.html + +requests: + - method: GET + path: + - "{{BaseURL}}/owa/auth/logon.aspx?replaceCurrent=1&url={{BaseURL}}/ecp" + + matchers-condition: and + matchers: + - type: status + status: + - 200 + + - type: word + words: + - 'Exchange Admin Center' \ No newline at end of file