Merge pull request #3952 from idealphase/master

Added open-virtualization-manager-detect.yaml
patch-1
Prince Chaddha 2022-03-23 13:11:59 +05:30 committed by GitHub
commit 40ddb72477
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 73 additions and 0 deletions

View File

@ -0,0 +1,38 @@
id: open-virtualization-manager-panel
info:
name: Open Virtualization Manager Userportal and Webadmin panel
author: idealphase
severity: info
description: open-source distributed virtualization solution, designed to manage your entire enterprise infrastructure. oVirt uses the trusted KVM hypervisor and is built upon several other community projects, including libvirt, Gluster, PatternFly, and Ansible.
metadata:
shodan-query: title:"Ovirt-Engine"
google-query: intitle:"Ovirt-Engine"
reference:
- https://www.ovirt.org/
- https://www.ovirt.org/dropped/admin-guide/virt/console-client-resources.html
tags: panel,ovirt,oss
requests:
- method: GET
path:
- '{{BaseURL}}/ovirt-engine/userportal/'
- '{{BaseURL}}/ovirt-engine/webadmin/'
matchers-condition: and
matchers:
- type: word
words:
- '"application_title":"oVirt Engine User Portal"'
- '"application_title":"oVirt Engine Web Administration"'
condition: or
- type: status
status:
- 200
extractors:
- type: regex
group: 1
regex:
- '"application_title":"(([a-zA-Z]+\s)*[a-zA-Z]+)"'

View File

@ -0,0 +1,35 @@
id: open-virtualization-manager-detect
info:
name: Open Virtualization Manager Detect
author: idealphase
severity: info
description: open-source distributed virtualization solution, designed to manage your entire enterprise infrastructure. oVirt uses the trusted KVM hypervisor and is built upon several other community projects, including libvirt, Gluster, PatternFly, and Ansible.
metadata:
shodan-query: title:"Ovirt-Engine"
google-query: intitle:"Ovirt-Engine"
reference:
- https://www.ovirt.org/
- https://www.ovirt.org/dropped/admin-guide/virt/console-client-resources.html
tags: tech,ovirt
requests:
- method: GET
path:
- '{{BaseURL}}/ovirt-engine/'
matchers-condition: and
matchers:
- type: word
words:
- "Welcome to Open Virtualization Manager"
- "<title>Ovirt-Engine</title>"
- "<title>oVirt Engine</title>"
- "<title>oVirt Engine Error</title>"
condition: or
extractors:
- type: regex
group: 1
regex:
- '<span class="version-text">(.+)<\/span>'