diff --git a/exposed-panels/3cx-phone-management-panel.yaml b/exposed-panels/3cx-phone-management-panel.yaml
index dadf577050..1d7a536697 100644
--- a/exposed-panels/3cx-phone-management-panel.yaml
+++ b/exposed-panels/3cx-phone-management-panel.yaml
@@ -9,7 +9,9 @@ info:
- https://www.3cx.com/phone-system/
- https://medium.com/@frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88
metadata:
- shodan-query: http.title:"3CX Phone System Management Console"
+ shodan-query:
+ - http.title:"3CX Phone System Management Console"
+ - http.favicon.hash:970132176
google-query: intitle:"3CX Phone System Management Console"
tags: panel,3cx
@@ -21,5 +23,6 @@ requests:
matchers:
- type: word
words:
- - "
3CX Phone System Management Console"
+ - "3CX Phone System Management Console"
- "Welcome to the 3CX Management Console"
+ condition: or
diff --git a/exposed-panels/3cx-phone-webclient-management-panel.yaml b/exposed-panels/3cx-phone-webclient-management-panel.yaml
index 165d8db6c1..1c4be16616 100644
--- a/exposed-panels/3cx-phone-webclient-management-panel.yaml
+++ b/exposed-panels/3cx-phone-webclient-management-panel.yaml
@@ -1,11 +1,10 @@
id: 3cx-phone-webclient-management-panel
info:
- name: 3CX Phone System Webclient Management Console Detect
+ name: 3CX Phone System Webclient Management Console
author: idealphase
severity: info
reference:
- - https://www.3cx.com/
- https://www.3cx.com/phone-system/
- https://www.3cx.com/blog/unified-communications/client-apps/
- https://medium.com/@frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88
@@ -24,3 +23,4 @@ requests:
words:
- " 3CX Webclient"
- ''
+ condition: or
\ No newline at end of file
diff --git a/technologies/favicon-detection.yaml b/technologies/favicon-detection.yaml
index 6211206af3..36d2688f6c 100644
--- a/technologies/favicon-detection.yaml
+++ b/technologies/favicon-detection.yaml
@@ -445,6 +445,8 @@ requests:
name: "3cx-phone-system"
dsl:
- "status_code==200 && (\"970132176\" == mmh3(base64_py(body)))"
+ - "status_code==200 && (\"970132176\" == mmh3(base64_py(body)))"
+ condition: or
- type: dsl
name: "bluehost"