diff --git a/exposed-panels/storybook-panel.yaml b/exposed-panels/storybook-panel.yaml new file mode 100644 index 0000000000..969146369e --- /dev/null +++ b/exposed-panels/storybook-panel.yaml @@ -0,0 +1,37 @@ +id: storybook-panel + +info: + name: Storybook Login Panel - Detect + author: kh4sh3i + severity: info + description: | + Storybook login panel was detected. + reference: + - https://storybook.js.org/ + + classification: + cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cvss-score: 0.0 + cwe-id: CWE-200 + metadata: + verified: true + shodan-query: http.html:"storybook" + tags: panel,storybook,workshop + +requests: + - method: GET + path: + - "{{BaseURL}}/?path=/settings/about" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - 'Storybook' + case-insensitive: true + + - type: status + status: + - 200 +