diff --git a/http/exposed-panels/easyvista-panel.yaml b/http/exposed-panels/easyvista-panel.yaml new file mode 100644 index 0000000000..d21e0aea11 --- /dev/null +++ b/http/exposed-panels/easyvista-panel.yaml @@ -0,0 +1,35 @@ +id: easyvista-panel + +info: + name: EasyVista Login Panel - Detect + author: righettod + severity: info + description: | + EasyVista login panel was detected. + reference: + - https://www.easyvista.com/ + metadata: + max-request: 1 + verified: true + shodan-query: http.title:"Easyvista" + tags: panel,easyvista,login,detect + +http: + - method: GET + path: + - "{{BaseURL}}/index.php" + + matchers: + - type: dsl + dsl: + - 'status_code == 200' + - 'contains_any(to_lower(body), "easyvista apps", "easyvista-bundle.min.js", "packages_com_easyvista_core")' + condition: and + + extractors: + - type: regex + part: body + group: 1 + regex: + - '(?i)package:\s+"([a-z0-9._-]+)"' + - '(?i)version : ([a-z0-9._-]+)' \ No newline at end of file