GlobalProtect panel detection

2020-04-06 05:48:27 +08:00 · 2020-04-06 05:48:27 +08:00 · 4668a7d9e3
parent 968b570f8f
commit 4668a7d9e3
1 changed files with 15 additions and 0 deletions
--- a/panels/globalprotect-panel.yaml
+++ b/panels/globalprotect-panel.yaml
@ -0,0 +1,15 @@
+id: globalprotect-panel
+
+info:
+  name: PaloAlto Networks GlobalProtect Panel
+  author: organiccrap
+  severity: low
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/global-protect/login.esp"
+    matchers:
+      - type: word
+        words:
+          - "<title>GlobalProtect Portal</TITLE>"