diff --git a/http/exposed-panels/nocodb-panel.yaml b/http/exposed-panels/nocodb-panel.yaml new file mode 100644 index 0000000000..4b13399b47 --- /dev/null +++ b/http/exposed-panels/nocodb-panel.yaml @@ -0,0 +1,35 @@ +id: nocodb-panel + +info: + name: NocoDB Panel - Detect + author: userdehghani + severity: info + description: | + NocoDB Login panel was discovered. + reference: + - https://www.nocodb.com/ + - https://docs.nocodb.com/ + metadata: + verified: true + max-request: 1 + shodan-query: http.favicon.hash:206985584 + tags: panel,nocodb,login,detect + +http: + - method: GET + path: + - "{{BaseURL}}/dashboard/#/signin" + - "{{BaseURL}}/dashboard/favicon.ico" + + stop-at-first-match: true + matchers-condition: or + matchers: + - type: word + part: body + words: + - 'content="NocoDB' + case-insensitive: true + + - type: dsl + dsl: + - "status_code==200 && (\"206985584\" == mmh3(base64_py(body)))"