Merge pull request #9140 from righettod/goany_upd

Add more detection criteria for GoAnywhere Managed File Transfer Login Panel
patch-1
Ritik Chaddha 2024-02-15 00:47:34 +05:30 committed by GitHub
commit 4a1a86ee10
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 3 deletions

View File

@ -2,7 +2,7 @@ id: goanywhere-mft-login
info: info:
name: GoAnywhere Managed File Transfer Login Panel - Detect name: GoAnywhere Managed File Transfer Login Panel - Detect
author: ritikchaddha author: ritikchaddha,righettod
severity: info severity: info
description: GoAnywhere Managed File Transfer login panel was detected. description: GoAnywhere Managed File Transfer login panel was detected.
classification: classification:
@ -19,6 +19,7 @@ http:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/goanywhere/auth/Login.xhtml" - "{{BaseURL}}/goanywhere/auth/Login.xhtml"
- "{{BaseURL}}/webclient/Login.xhtml"
host-redirects: true host-redirects: true
max-redirects: 2 max-redirects: 2
@ -28,9 +29,9 @@ http:
- type: word - type: word
words: words:
- "GoAnywhere Managed File Transfer" - "GoAnywhere Managed File Transfer"
- "GoAnywhere Web Client"
condition: or
- type: status - type: status
status: status:
- 200 - 200
# digest: 490a0046304402205b605c05ee41614eef44107d330860d39370d7d7708e6d00b7dd55a9cffacb8f02205e3cb202a73458c0bdc6a5880b74e857c94effacad4668096f861e34716102de:922c64590222798bb761d5b6d8e72950