From 85c5f223a364e8651bfc1e9399bd610b973bb954 Mon Sep 17 00:00:00 2001
From: Rishi <rishi@rxerium.com>
Date: Tue, 8 Oct 2024 20:09:58 +0100
Subject: [PATCH] accellion

---
 http/technologies/accellion-detect.yaml | 31 +++++++++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 http/technologies/accellion-detect.yaml

diff --git a/http/technologies/accellion-detect.yaml b/http/technologies/accellion-detect.yaml
new file mode 100644
index 0000000000..4641a777ad
--- /dev/null
+++ b/http/technologies/accellion-detect.yaml
@@ -0,0 +1,31 @@
+id: accellion-detect
+
+info:
+  name: Accellion Detection
+  author: rxerium
+  severity: info
+  description: Dectection of Accellion File Transfer Appliance. 
+  metadata:
+    verified: true
+    max-request: 1
+    shodan-query: http.body:"/cfadmin/img/accellion-logo.png"
+  tags: accellion,tech,detect
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+      - "{{BaseURL}}/cfadmin/"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        words:
+          - '/cfadmin/img/accellion-logo.png'
+          - 'secured by accellion'
+        part: body
+        condition: or
\ No newline at end of file