Update and rename rdweb-detect.yaml to rdweb-panel.yaml

http/exposed-panels/rdweb-detect.yaml

@@ -1,27 +0,0 @@
-id: rdweb-detect
-
-info:
-  name: rdweb-detect
-  author: rxerium, sorrowx3
-  severity: info
-  description: Nuclei template to detect instances running RD Web
-  reference:
-    - https://rdweb.wvd.microsoft.com/webclient
-
-http:
-  - method: GET
-    path:
-      - '{{BaseURL}}/RDWeb/'
-
-    host-redirects: true
-    max-redirects: 1
-
-    matchers:
-      - type: word
-        words:
-          - "Set-Cookie: TSWAFeatureCheckCookie=true; path=/RDWeb/"
-        part: header
-
-      - type: status
-        status:
-          - 200

http/exposed-panels/rdweb-panel.yaml

@@ -0,0 +1,31 @@
+id: rdweb-panel
+
+info:
+  name: RD Web Access - Panel Detect
+  author: rxerium,sorrowx3
+  severity: info
+  description: 
+  reference:
+    - https://rdweb.wvd.microsoft.com/webclient
+  metadata:
+    max-request: 1
+    verified: true
+    shodan-query: html:"RD Web Access"
+  tags: panel,login,rdp,web-access
+
+http:
+  - method: GET
+    path:
+      - '{{BaseURL}}/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Default.aspx'
+
+    host-redirects: true
+    max-redirects: 2
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "Web Access</title>"
+
+      - type: status
+        status:
+          - 200