diff --git a/http/technologies/checkpoint-mobile-detect.yaml b/http/technologies/checkpoint-mobile-detect.yaml new file mode 100644 index 0000000000..53d4d3888a --- /dev/null +++ b/http/technologies/checkpoint-mobile-detect.yaml @@ -0,0 +1,35 @@ +id: checkpoint-mobile-detect + +info: + name: Check Point Mobile SSL VPN - Detect + author: righettod + severity: info + description: | + Check Point Mobile SSL VPN was detected. + reference: + - https://www.checkpoint.com/quantum/remote-access-vpn/ + metadata: + max-request: 1 + verified: true + shodan-query: http.html:"Check Point Mobile" + tags: checkpoint,detect + +http: + - method: GET + path: + - '{{BaseURL}}/sslvpn/Login' + + matchers-condition: and + matchers: + - type: word + part: body + words: + - 'Check Point Mobile' + - 'Check Point Software Technologies' + condition: and + case-insensitive: true + + - type: status + status: + - 403 +