diff --git a/http/exposed-panels/solarwinds-arm-detect.yaml b/http/exposed-panels/solarwinds-arm-panel.yaml similarity index 74% rename from http/exposed-panels/solarwinds-arm-detect.yaml rename to http/exposed-panels/solarwinds-arm-panel.yaml index db941a846f..ae521c4390 100644 --- a/http/exposed-panels/solarwinds-arm-detect.yaml +++ b/http/exposed-panels/solarwinds-arm-panel.yaml @@ -1,10 +1,11 @@ -id: solarwinds-arm-detect +id: solarwinds-arm-panel info: name: SolarWinds ARM (Access Rights Manager) - Detect author: bhutch severity: info - description: SolarWinds ARM login panel was detected. + description: | + SolarWinds ARM login panel was detected. reference: - https://www.solarwinds.com/access-rights-manager classification: @@ -14,22 +15,23 @@ info: metadata: max-request: 1 censys-query: services.http.response.html_title="Solarwinds Access Rights Manager" - shodan-query: http.title:"Solarwinds Access Rights Manager" - tags: panel,solarwinds + shodan-query: http.favicon.hash:-1416464161 + verified: true + tags: panel,solarwinds,panel http: - method: GET path: - "{{BaseURL}}" - redirects: true - + host-redirects: true + max-redirects: 2 matchers-condition: and matchers: - type: word + part: body words: - "Solarwinds Access Rights Manager" - part: body - type: status status: