fix: false negative totemomail-panel

patch-1
Muhammad Daffa 2022-10-15 13:59:29 +07:00 committed by GitHub
parent a70aac7dc5
commit 8258e14c2a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 30 additions and 23 deletions

View File

@ -1,23 +0,0 @@
id: totemomail-detect
info:
name: Detect totemomail - Secure email communication
author: johnk3r
severity: info
tags: totemomail,panel
requests:
- method: GET
path:
- "{{BaseURL}}/responsiveUI/webmail/folder.xhtml"
matchers-condition: and
matchers:
- type: word
words:
- "<title>WebMail login: totemomail® WebMail</title>"
part: body
- type: status
status:
- 200

View File

@ -0,0 +1,30 @@
id: totemomail-panel
info:
name: Totemomail login panel
author: johnk3r,daffainfo
reference:
- https://www.totemo.com/en/products/email-encryption
metadata:
verified: true
google-query: intext:"totemomail" inurl:responsiveUI
severity: info
tags: totemomail,panel
requests:
- method: GET
path:
- "{{BaseURL}}/responsiveUI/"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "/responsiveUI/javax.faces.resource/images/totemomail_logo.svg.xhtml"
- "/responsiveUI/javax.faces.resource/css/custom.css.xhtml?con=totemo"
condition: and
- type: status
status:
- 200