Merge pull request #9787 from righettod/easyvista_add

Add detection of EasyVista login panel instances.
patch-2
pussycat0x 2024-05-14 13:53:33 +05:30 committed by GitHub
commit 52d4bde5c6
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 35 additions and 0 deletions

View File

@ -0,0 +1,35 @@
id: easyvista-panel
info:
name: EasyVista Login Panel - Detect
author: righettod
severity: info
description: |
EasyVista login panel was detected.
reference:
- https://www.easyvista.com/
metadata:
max-request: 1
verified: true
shodan-query: http.title:"Easyvista"
tags: panel,easyvista,login,detect
http:
- method: GET
path:
- "{{BaseURL}}/index.php"
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains_any(to_lower(body), "<title>easyvista apps</title>", "easyvista-bundle.min.js", "packages_com_easyvista_core")'
condition: and
extractors:
- type: regex
part: body
group: 1
regex:
- '(?i)package:\s+"([a-z0-9._-]+)"'
- '(?i)version&nbsp;:&nbsp;([a-z0-9._-]+)'