From 12f4aa87df327c342fee79a61add99ed4972c449 Mon Sep 17 00:00:00 2001
From: Joan Bono <joan@bono.cat>
Date: Tue, 2 Mar 2021 16:29:32 +0100
Subject: [PATCH] Create checkmarx-panel.yaml

---
 exposed-panels/checkmarx-panel.yaml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 exposed-panels/checkmarx-panel.yaml

diff --git a/exposed-panels/checkmarx-panel.yaml b/exposed-panels/checkmarx-panel.yaml
new file mode 100644
index 0000000000..f60a778943
--- /dev/null
+++ b/exposed-panels/checkmarx-panel.yaml
@@ -0,0 +1,18 @@
+id: checkmarx-panel-detect
+
+info:
+  name: Checkmarx WebClient detector
+  author: joanbono
+  severity: info
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/cxwebclient/Login.aspx"
+    headers:
+      User-Agent:  Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko)
+    matchers:
+      - type: word
+        words:
+          - '/CxWebClient/webApp/Scripts/libs/authenticationScripts'
+        part: body