Merge pull request #9301 from righettod/graylog_add

Add detection of Graylog login panel instances.
patch-1
pussycat0x 2024-03-08 23:06:53 +05:30 committed by GitHub
commit 3d475037c5
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 27 additions and 0 deletions

View File

@ -0,0 +1,27 @@
id: graylog-panel
info:
name: Graylog Login Panel - Detect
author: righettod
severity: info
description: |
Graylog login panel was detected.
reference:
- https://graylog.org/
metadata:
max-request: 1
verified: true
shodan-query: http.title:"Graylog Web Interface"
tags: panel,graylog,login,detect
http:
- method: GET
path:
- "{{BaseURL}}"
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains(body, "<title>Graylog Web Interface")'
condition: and