Merge pull request #8519 from righettod/add_servicenow_tpl

Add template to detect ServiceNow login panel
patch-1
Dhiyaneshwaran 2023-11-02 13:47:36 +05:30 committed by GitHub
commit 580264e679
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 42 additions and 0 deletions

View File

@ -0,0 +1,42 @@
id: servicenow-panel
info:
name: ServiceNow Login Panel - Detect
author: righettod
severity: info
description: |
ServiceNow Login Panel was detected.
reference:
- https://www.servicenow.com/
metadata:
verified: true
max-request: 1
shodan-query: http.favicon.hash:1701804003
tags: panel,servicenow,login,detect
http:
- method: GET
path:
- '{{BaseURL}}/login.do'
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'ServiceNow'
- 'window.NOW.'
- 'NOW.user.userID'
condition: and
case-insensitive: true
- type: status
status:
- 200
extractors:
- type: regex
part: body
group: 1
regex:
- '(?i)g_builddate\s+=\s+"([0-9._-]+)"'