Merge pull request #4478 from r3naissance/master

Adding additional matchers to hp printers without auth
patch-1
Prince Chaddha 2022-06-20 11:17:46 +05:30 committed by GitHub
commit 36524d0685
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 8 additions and 7 deletions

View File

@ -1,11 +1,11 @@
id: unauthorized-hp-printer
info:
name: Unauthorized HP Printer
author: pussycat0x
severity: high
tags: hp,iot,unauth
requests:
- method: GET
path:

View File

@ -1,23 +1,24 @@
id: unauthorized-hp-officepro-printer
id: unauthorized-printer-hp
info:
name: Unauthorized HP office pro printer
author: pussycat0x
author: pussycat0x,r3naissance
severity: high
metadata:
shodan-dork: http.title:"Hp Officejet pro"
tags: hp,iot,unauth
requests:
- method: GET
path:
- "{{BaseURL}}"
- "{{BaseURL}}/hp/device/webAccess/index.htm?content=security"
matchers-condition: and
matchers:
- type: regex
regex:
- '<title>HP Officejet Pro([ 0-9A-Za-z]+)<\/title>'
- '<title>(HP Officejet Pro([ 0-9A-Za-z]+)|HP Designjet([ 0-9A-Za-z]+).*)<\/title>'
- type: status
status: