diff --git a/exposed-panels/qmail-admin-login.yaml b/exposed-panels/qmail-admin-login.yaml new file mode 100644 index 0000000000..d7617654a0 --- /dev/null +++ b/exposed-panels/qmail-admin-login.yaml @@ -0,0 +1,33 @@ +id: qmail-admin-login + +info: + name: QmailAdmin Login + author: ritikchaddha + severity: info + metadata: + verified: true + shodan-query: title:"QmailAdmin" + tags: qmail,panel + +requests: + - method: GET + path: + - "{{BaseURL}}" + - "{{BaseURL}}/qmailadmin/qmailadmin.cgi" + - "{{BaseURL}}/cgi-bin/qmailadmin/qmailadmin" + - "{{BaseURL}}/cgi-bin/qmailadmin" + - "{{BaseURL}}/cgi-ssl/qmailadmin/qmailadmin" + + redirects: true + max-redirects: 2 + stop-at-first-match: true + matchers-condition: and + matchers: + + - type: word + words: + - "QmailAdmin" + + - type: status + status: + - 200 diff --git a/exposed-panels/webshell4-login-panel.yaml b/exposed-panels/webshell4-login-panel.yaml new file mode 100644 index 0000000000..56f2a65589 --- /dev/null +++ b/exposed-panels/webshell4-login-panel.yaml @@ -0,0 +1,28 @@ +id: webshell4-login-panel + +info: + name: WebShell4 Login + author: ritikchaddha + severity: info + metadata: + verified: true + shodan-query: http.html:"webshell4" + tags: webshell4,panel + +requests: + - method: GET + path: + - "{{BaseURL}}/webshell4/login.php" + + matchers-condition: and + matchers: + + - type: word + words: + - "/webshell4/index2.php" + - "enter login name" + condition: and + + - type: status + status: + - 200