Add files via upload

patch-3
Dominique RIGHETTO 2024-05-29 19:24:43 +02:00 committed by GitHub
parent 3e953023ca
commit 644cc91b61
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 40 additions and 0 deletions

View File

@ -0,0 +1,40 @@
id: oracle-access-management
info:
name: Oracle Access Management Login Panel - Detect
author: righettod
severity: info
description: Oracle Access Management login panel was detected.
classification:
cpe: cpe:2.3:a:oracle:access_manager:*:*:*:*:*:*:*:*
metadata:
max-request: 1
shodan-query: http.title:"Oracle Access Management"
vendor: oracle
verified: true
tags: panel,oracle,login,detect
http:
- method: GET
path:
- "{{BaseURL}}/oam/pages/login.jsp"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "<title>Login - Oracle Access Management"
- "/oam/server/auth_cred_submit"
condition: or
- type: status
status:
- 200
extractors:
- type: regex
part: body
group: 1
regex:
- '(?i)Login\s+-\s+Oracle\s+Access\s+Management\s+([a-z0-9]+)</title>'