Merge pull request #10040 from righettod/ibm_sam_upd

Add more matchers to the "IBM Security Access Manager" login panel detection template.
patch-4
pussycat0x 2024-06-16 16:27:48 +05:30 committed by GitHub
commit 3effae3c9d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 3 deletions

View File

@ -2,7 +2,7 @@ id: ibm-security-access-manager
info:
name: IBM Security Access Manager Login Panel - Detect
author: geeknik
author: geeknik,righettod
severity: info
description: IBM Security Access Manager login panel was detected.
reference:
@ -14,8 +14,9 @@ info:
metadata:
max-request: 1
vendor: ibm
shodan-query: http.title:"IBM Security Access Manager"
product: security_access_manager
tags: panel,ibm
tags: panel,ibm,login,detect
http:
- method: GET
@ -27,7 +28,9 @@ http:
- type: word
words:
- "<title>IBM Security Access Manager</title>"
- "IBM Security <em>Access Manager</em>"
part: body
condition: or
- type: word
words:
@ -40,4 +43,3 @@ http:
- "/mga/sps/authsvc/policy/forgot_password"
part: body
condition: and
# digest: 4a0a00473045022100b3c31b972a1af3fbf321e8d2fad135f3c60e69ab84023684e3bdc1903e0a3f75022016212bd0980f645527268ebe265aed9838f5fe47d1fd9a37ffbac227e5765894:922c64590222798bb761d5b6d8e72950