Merge pull request #11141 from righettod/pronote_add

Add detection of PRONOTE login panel instances.
patch-14
Ritik Chaddha 2024-11-07 11:25:36 +05:30 committed by GitHub
commit 2fd2491bb3
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 35 additions and 0 deletions

View File

@ -0,0 +1,35 @@
id: pronote-panel
info:
name: PRONOTE Login Panel - Detect
author: righettod
severity: info
description: |
PRONOTE products was detected.
reference:
- https://www.index-education.com/fr/logiciel-gestion-vie-scolaire.php
metadata:
max-request: 1
shodan-query: http.title:"PRONOTE"
tags: panel,pronote,login
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains_any(to_lower(body), "<title>pronote", "content=\"pronote\"")'
condition: and
extractors:
- type: regex
part: header
group: 1
regex:
- '(?i)Server:\s+PRONOTE\s+([0-9.\s\-]+)'