From 6295ebaf046bb69223873537a18427b697c25f93 Mon Sep 17 00:00:00 2001 From: "M. Dehghani" Date: Mon, 13 May 2024 08:57:45 +0330 Subject: [PATCH 1/2] Add nocodb-panel.yaml --- http/exposed-panels/nocodb-panel.yaml | 35 +++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 http/exposed-panels/nocodb-panel.yaml diff --git a/http/exposed-panels/nocodb-panel.yaml b/http/exposed-panels/nocodb-panel.yaml new file mode 100644 index 0000000000..17fa2772f9 --- /dev/null +++ b/http/exposed-panels/nocodb-panel.yaml @@ -0,0 +1,35 @@ +id: nocodb-panel + +info: + name: NocoDB Panel - Detect + author: userdehghani + severity: info + description: | + no-code database platform that allows teams to collaborate and build applications with ease of a familiar and intuitive spreadsheet interface + reference: + - https://www.nocodb.com/ + - https://docs.nocodb.com/ + metadata: + verified: true + max-request: 1 + shodan-query: http.favicon.hash:206985584 + tags: panel,nocodb,login,detect + +http: + - method: GET + path: + - "{{BaseURL}}/dashboard/#/signin" + - "{{BaseURL}}/dashboard/favicon.ico" + + stop-at-first-match: true + matchers-condition: or + matchers: + - type: word + part: body + words: + - 'content="NocoDB' + case-insensitive: true + + - type: dsl + dsl: + - "status_code==200 && (\"206985584\" == mmh3(base64_py(body)))" \ No newline at end of file From 7887810c9e93e2be8626ffc280525772f412f366 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Mon, 13 May 2024 13:11:29 +0530 Subject: [PATCH 2/2] Update nocodb-panel.yaml --- http/exposed-panels/nocodb-panel.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/http/exposed-panels/nocodb-panel.yaml b/http/exposed-panels/nocodb-panel.yaml index 17fa2772f9..4b13399b47 100644 --- a/http/exposed-panels/nocodb-panel.yaml +++ b/http/exposed-panels/nocodb-panel.yaml @@ -5,7 +5,7 @@ info: author: userdehghani severity: info description: | - no-code database platform that allows teams to collaborate and build applications with ease of a familiar and intuitive spreadsheet interface + NocoDB Login panel was discovered. reference: - https://www.nocodb.com/ - https://docs.nocodb.com/ @@ -32,4 +32,4 @@ http: - type: dsl dsl: - - "status_code==200 && (\"206985584\" == mmh3(base64_py(body)))" \ No newline at end of file + - "status_code==200 && (\"206985584\" == mmh3(base64_py(body)))"