From 33e3a5b28c56dd5a18261605e482085f6fe5d247 Mon Sep 17 00:00:00 2001
From: Dominique RIGHETTO <righettod@users.noreply.github.com>
Date: Sun, 26 May 2024 16:54:24 +0200
Subject: [PATCH] Add files via upload

---
 http/exposed-panels/microfocus-filr-panel.yaml | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/http/exposed-panels/microfocus-filr-panel.yaml b/http/exposed-panels/microfocus-filr-panel.yaml
index 6e2a354d47..8aa1782d6b 100644
--- a/http/exposed-panels/microfocus-filr-panel.yaml
+++ b/http/exposed-panels/microfocus-filr-panel.yaml
@@ -2,7 +2,7 @@ id: microfocus-filr-panel
 
 info:
   name: Micro Focus Filr Login Panel - Detect
-  author: ritikchaddha
+  author: ritikchaddha,righettod
   severity: info
   description: Micro Focus Filr login panel was detected.
   classification:
@@ -21,6 +21,9 @@ http:
   - method: GET
     path:
       - "{{BaseURL}}/filr/login"
+      - "{{BaseURL}}/login"
+
+    stop-at-first-match: true
 
     matchers-condition: and
     matchers:
@@ -28,8 +31,18 @@ http:
         part: body
         words:
           - "Micro Focus Filr"
+          - "Filr Appliance"
+        condition: or
 
       - type: status
         status:
           - 404
-# digest: 4b0a00483046022100b581b8f63993790bf5a89f8c413281bb7065e031741d55cbca6849a4511328dc0221008e321e620f27ae94c13f9efad92bd5ccb0cfa5e81008e38c80e2eb5620ac4b01:922c64590222798bb761d5b6d8e72950
\ No newline at end of file
+          - 200
+        condition: or
+
+    extractors:
+      - type: regex
+        part: body
+        group: 1
+        regex:
+          - '(?i)\s+([0-9-]+)\s+Micro\s+Focus'
\ No newline at end of file