From 324ff2acdf8c223b2bb9aa92d00c08fa71466445 Mon Sep 17 00:00:00 2001
From: sandeep <sandeep@projectdiscovery.io>
Date: Fri, 25 Feb 2022 16:45:17 +0530
Subject: [PATCH] Added netflix-conductor template

---
 exposed-panels/netflix-conductor-ui.yaml     | 29 +++++++++++++
 miscellaneous/netflix-conductor-version.yaml | 44 ++++++++++++++++++++
 2 files changed, 73 insertions(+)
 create mode 100644 exposed-panels/netflix-conductor-ui.yaml
 create mode 100644 miscellaneous/netflix-conductor-version.yaml

diff --git a/exposed-panels/netflix-conductor-ui.yaml b/exposed-panels/netflix-conductor-ui.yaml
new file mode 100644
index 0000000000..b0fbf4c1b1
--- /dev/null
+++ b/exposed-panels/netflix-conductor-ui.yaml
@@ -0,0 +1,29 @@
+id: netflix-conductor-ui
+
+info:
+  name: Netflix Conductor UI Detection
+  author: c-sh0
+  severity: info
+  metadata:
+    shodan-query: http.title:"Conductor UI", http.title:"Workflow UI"
+  tags: webserver,netflix,conductor,panel
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    redirects: true
+    max-redirects: 2
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        part: body
+        words:
+          - '<title>Conductor UI</title>'
+          - '<title>Workflow UI</title>'
+        condition: or
\ No newline at end of file
diff --git a/miscellaneous/netflix-conductor-version.yaml b/miscellaneous/netflix-conductor-version.yaml
new file mode 100644
index 0000000000..d65a74f13b
--- /dev/null
+++ b/miscellaneous/netflix-conductor-version.yaml
@@ -0,0 +1,44 @@
+id: netflix-conductor-version
+
+info:
+  name: Netflix Conductor Version Detection
+  author: c-sh0
+  severity: info
+  description: Obtain netflix conductor version information
+  reference:
+    - https://github.com/Netflix/conductor/blob/v1.6.0-rc1/ui/src/server.js#L17
+    - https://github.com/Netflix/conductor/blob/v3.1.0/rest/src/main/java/com/netflix/conductor/rest/controllers/AdminResource.java#L42
+  metadata:
+    shodan-query: http.title:"Conductor UI", http.title:"Workflow UI"
+  tags: tech,netflix,conductor,api
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/api/admin/config"
+      - "{{BaseURL}}/api/sys"
+
+    stop-at-first-match: true
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        part: header
+        words:
+          - 'application/json'
+
+      - type: word
+        part: body
+        words:
+          - 'CONDUCTOR_'
+        case-insensitive: true
+
+    extractors:
+      - type: regex
+        group: 1
+        regex:
+          - 'conductor\-server\-([0-9.]+)\-'
+          - '"version":"([0-9.]+)\-'
\ No newline at end of file