diff --git a/exposed-panels/3cx-phone-management-panel.yaml b/exposed-panels/3cx-phone-management-panel.yaml index dadf577050..1d7a536697 100644 --- a/exposed-panels/3cx-phone-management-panel.yaml +++ b/exposed-panels/3cx-phone-management-panel.yaml @@ -9,7 +9,9 @@ info: - https://www.3cx.com/phone-system/ - https://medium.com/@frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88 metadata: - shodan-query: http.title:"3CX Phone System Management Console" + shodan-query: + - http.title:"3CX Phone System Management Console" + - http.favicon.hash:970132176 google-query: intitle:"3CX Phone System Management Console" tags: panel,3cx @@ -21,5 +23,6 @@ requests: matchers: - type: word words: - - "3CX Phone System Management Console" + - "3CX Phone System Management Console" - "Welcome to the 3CX Management Console" + condition: or diff --git a/exposed-panels/3cx-phone-webclient-management-panel.yaml b/exposed-panels/3cx-phone-webclient-management-panel.yaml index 165d8db6c1..1c4be16616 100644 --- a/exposed-panels/3cx-phone-webclient-management-panel.yaml +++ b/exposed-panels/3cx-phone-webclient-management-panel.yaml @@ -1,11 +1,10 @@ id: 3cx-phone-webclient-management-panel info: - name: 3CX Phone System Webclient Management Console Detect + name: 3CX Phone System Webclient Management Console author: idealphase severity: info reference: - - https://www.3cx.com/ - https://www.3cx.com/phone-system/ - https://www.3cx.com/blog/unified-communications/client-apps/ - https://medium.com/@frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88 @@ -24,3 +23,4 @@ requests: words: - " 3CX Webclient" - '' + condition: or \ No newline at end of file diff --git a/technologies/favicon-detection.yaml b/technologies/favicon-detection.yaml index 6211206af3..36d2688f6c 100644 --- a/technologies/favicon-detection.yaml +++ b/technologies/favicon-detection.yaml @@ -445,6 +445,8 @@ requests: name: "3cx-phone-system" dsl: - "status_code==200 && (\"970132176\" == mmh3(base64_py(body)))" + - "status_code==200 && (\"970132176\" == mmh3(base64_py(body)))" + condition: or - type: dsl name: "bluehost"