From 42d92c949c817a724e6bd202fae4e5b2b95cc697 Mon Sep 17 00:00:00 2001
From: idealphase <mynameisphase@gmail.com>
Date: Sat, 16 Apr 2022 18:42:24 +0700
Subject: [PATCH] Added mspcontrol-login.yaml, bigfix-login.yaml and Updated
 favicon-detection.yaml  (#4166)

* Added mspcontrol-login.yaml

Added mspcontrol-login.yaml

* Updated favicon-detection.yaml

Added mspcontrol favicon detection

* Updated favicon-detection.yaml

Deleted empty line

* Added bigfix-login.yaml

Added bigfix-login.yaml

* misc update

Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
---
 exposed-panels/bigfix-login.yaml     | 31 +++++++++++++++++++++++++++
 exposed-panels/mspcontrol-login.yaml | 32 ++++++++++++++++++++++++++++
 technologies/favicon-detection.yaml  |  5 +++++
 3 files changed, 68 insertions(+)
 create mode 100644 exposed-panels/bigfix-login.yaml
 create mode 100644 exposed-panels/mspcontrol-login.yaml

diff --git a/exposed-panels/bigfix-login.yaml b/exposed-panels/bigfix-login.yaml
new file mode 100644
index 0000000000..c025038f25
--- /dev/null
+++ b/exposed-panels/bigfix-login.yaml
@@ -0,0 +1,31 @@
+id: bigfix-login
+
+info:
+  name: HCL BigFix Login
+  author: idealphase
+  severity: info
+  description: BigFix automates discovery, management, and remediation of all endpoints whether on-premises, mobile, virtual, or in the cloud - regardless of the operating system, location, or connectivity. With BigFix, you can manage every endpoint.
+  reference:
+    - https://www.hcltechsw.com/bigfix
+  metadata:
+    shodan-query: http.title:"BigFix"
+    google-query: intitle:"BigFix"
+  tags: panel,bigfix
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/login"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "<title> BigFix </title>"
+          - '<div class="bigfix-logo">'
+        condition: or
+
+      - type: status
+        status:
+          - 200
diff --git a/exposed-panels/mspcontrol-login.yaml b/exposed-panels/mspcontrol-login.yaml
new file mode 100644
index 0000000000..09a7b4176b
--- /dev/null
+++ b/exposed-panels/mspcontrol-login.yaml
@@ -0,0 +1,32 @@
+id: mspcontrol-login
+
+info:
+  name: MSPControl Login
+  author: idealphase
+  severity: info
+  description: MSPControl is a Windows hosting control panel for Cloud Computing Companies and IT Providers to automate the provisioning of a full suite of hosted services on Windows servers.
+  reference:
+    - https://mspcontrol.org/
+    - https://mspcontrol.org/downloads/
+  metadata:
+    shodan-query: http.title:"MSPControl - Sign In"
+    google-query: intitle:"MSPControl - Sign In"
+  tags: panel,mspcontrol
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/Default.aspx?pid=Login&ReturnUrl=%2f"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "MSPControl - Sign In"
+          - "Sign In to Control Panel"
+        condition: or
+
+      - type: status
+        status:
+          - 200
diff --git a/technologies/favicon-detection.yaml b/technologies/favicon-detection.yaml
index fe3a26b825..396dbcc791 100644
--- a/technologies/favicon-detection.yaml
+++ b/technologies/favicon-detection.yaml
@@ -2570,3 +2570,8 @@ requests:
         name: "vmware-Workspace-ONE-Access"
         dsl:
           - "status_code==200 && (\"-1250474341\" == mmh3(base64_py(body)))"
+
+      - type: dsl
+        name: "mspcontrol"
+        dsl:
+          - "status_code==200 && (\"331817455\" == mmh3(base64_py(body)))"