diff --git a/http/exposed-panels/fortinet/fortiwlm-panel.yaml b/http/exposed-panels/fortinet/fortiwlm-panel.yaml new file mode 100644 index 0000000000..e6d430c407 --- /dev/null +++ b/http/exposed-panels/fortinet/fortiwlm-panel.yaml @@ -0,0 +1,40 @@ +id: fortiwlm-panel + +info: + name: Fortinet FortiWLM Login Panel - Detect + author: EgemenKochisarli + severity: info + description: | + Fortinet FortiWLM login panel was detected. + reference: + - https://docs.fortinet.com/product/fortiwlm/8.6 + classification: + cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cvss-score: 0 + cwe-id: CWE-200 + metadata: + vendor: fortinet + product: fortiwlm + max-request: 1 + shodan-query: html:"fortiwlm" + tags: panel,fortinet,fortiwlm,login + +http: + - method: GET + path: + - "{{BaseURL}}/wlm/login?next=/wlm" + + matchers-condition: and + matchers: + - type: word + words: + - "FortiWLM Login" + + - type: word + part: header + words: + - "text/html" + + - type: status + status: + - 200