Merge pull request #3854 from d4vy/kentico-login

Added CMS Kentico Login Page Detection
patch-1
Sandeep Singh 2022-03-08 01:24:40 +05:30 committed by GitHub
commit 1fb6160047
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 29 additions and 0 deletions

View File

@ -0,0 +1,29 @@
id: kentico-login
info:
name: Kentico Login Panel
author: d4vy
severity: info
reference: https://docs.xperience.io/k8/using-the-kentico-interface
tags: panel,login,kentico
requests:
- method: GET
path:
- "{{BaseURL}}/Admin/CMSAdministration.aspx"
- "{{BaseURL}}/CMSPages/logon.aspx"
stop-at-first-match: true
matchers-condition: or
matchers:
- type: dsl
dsl:
- "status_code==302"
- "contains(tolower(body), 'cmspages/logon.aspx')"
condition: and
- type: dsl
dsl:
- "status_code==200"
- "contains(tolower(body), 'cmspages/getresource.ashx')"
condition: and