diff --git a/http/exposed-panels/structurizr-panel.yaml b/http/exposed-panels/structurizr-panel.yaml new file mode 100644 index 0000000000..687ed2a050 --- /dev/null +++ b/http/exposed-panels/structurizr-panel.yaml @@ -0,0 +1,39 @@ +id: structurizr-panel + +info: + name: Structurizr Panel - Detect + author: DhiyaneshDk + severity: info + description: Structurizr login panel was detected. + classification: + cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cvss-score: 0 + cwe-id: CWE-200 + metadata: + max-request: 1 + verified: true + shodan-query: http.favicon.hash:1199592666 + tags: panel,structurizr,detect + +http: + - method: GET + path: + - "{{BaseURL}}" + - "{{BaseURL}}/signin" + + host-redirects: true + max-redirects: 2 + stop-at-first-match: true + matchers-condition: and + matchers: + - type: word + part: body + words: + - 'Structurizr' + - 'alt="Structurizr' + - 'structurizrBackground' + condition: or + + - type: status + status: + - 200