misc updates

exposed-panels/3cx-phone-management-panel.yaml

@@ -9,7 +9,9 @@ info:
     - https://www.3cx.com/phone-system/
     - https://medium.com/@frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88
   metadata:
-    shodan-query: http.title:"3CX Phone System Management Console"
+    shodan-query:
+      - http.title:"3CX Phone System Management Console"
+      - http.favicon.hash:970132176
     google-query: intitle:"3CX Phone System Management Console"
   tags: panel,3cx
 
@@ -21,5 +23,6 @@ requests:
     matchers:
       - type: word
         words:
-          - "<title>3CX Phone System Management Console</title>"
+          - "3CX Phone System Management Console"
           - "Welcome to the 3CX Management Console"
+        condition: or

exposed-panels/3cx-phone-webclient-management-panel.yaml

@@ -1,11 +1,10 @@
 id: 3cx-phone-webclient-management-panel
 
 info:
-  name: 3CX Phone System Webclient Management Console Detect
+  name: 3CX Phone System Webclient Management Console
   author: idealphase
   severity: info
   reference:
-    - https://www.3cx.com/
     - https://www.3cx.com/phone-system/
     - https://www.3cx.com/blog/unified-communications/client-apps/
     - https://medium.com/@frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88
@@ -24,3 +23,4 @@ requests:
         words:
           - " <title>3CX Webclient</title>"
           - '<meta name="description" content="3CX">'
+        condition: or

technologies/favicon-detection.yaml

@@ -445,6 +445,8 @@ requests:
         name: "3cx-phone-system"
         dsl:
           - "status_code==200 && (\"970132176\" == mmh3(base64_py(body)))"
+          - "status_code==200 && (\"970132176\" == mmh3(base64_py(body)))"
+        condition: or
 
       - type: dsl
         name: "bluehost"