Update and rename technologies/ocomon-detect.yaml to exposed-panels/ocomon-panel.yaml

exposed-panels/ocomon-panel.yaml

@@ -0,0 +1,39 @@
+id: ocomon-panel
+
+info:
+  name: OcoMon Login Panel
+  author: dogasantos
+  severity: info
+  description: a tiny helpdesk system written in php
+  reference:
+    - https://sourceforge.net/projects/ocomonphp/
+  metadata:
+    verified: true
+    shodan-query: http.html:"OcoMon"
+  tags: panel,ocomon,oss
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    redirects: true
+    max-redirects: 2
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - '(?i)(OcoMon)'
+
+      - type: word
+        part: body
+        words:
+          - 'open_form/ticket_form_open.php'
+
+    extractors:
+      - type: regex
+        group: 1
+        regex:
+          - 'Versão: ([0-9.]+)'
+          - 'Versão: ([0-9.]+)'

technologies/ocomon-detect.yaml

@@ -1,32 +0,0 @@
-id: ocomon-detect
-
-info:
-  name: OcoMon Detection
-  author: dogasantos
-  severity: info
-  description: a tiny helpdesk system written in php
-  reference:
-  - https://sourceforge.net/projects/ocomonphp/
-  tags: tech,helpdesk
-
-requests:
-  - method: GET
-    path:
-      - "{{BaseURL}}"
-
-    redirects: true
-    max-redirects: 2
-    matchers:
-      - type: word
-        words:
-          - '<title>OcoMon'
-          - 'content="OcoMon'
-          - 'alt="OcoMon'
-          - 'ocomon/open_form/ticket_form_open.php'
-        condition: and
-
-    extractors:
-      - type: regex
-        group: 1
-        regex:
-          - 'Versão: ([0-9.]+)'