Merge pull request #11131 from johnk3r/main

Create nexpose-panel.yaml
patch-13
Ritik Chaddha 2024-11-04 11:08:33 +05:30 committed by GitHub
commit 86fb71f21c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 32 additions and 0 deletions

View File

@ -0,0 +1,32 @@
id: nexpose-panel
info:
name: Rapid7 Nexpose VM Security Console - Detect
author: johnk3r
severity: info
description: |
Rapid7 Nexpose VM Security Console login panel was detected.
metadata:
verified: true
max-request: 1
shodan-query: http.favicon.hash:-516760689
tags: nexpose,panel,login,detect
http:
- method: GET
path:
- "{{BaseURL}}/login.jsp"
matchers:
- type: dsl
dsl:
- 'contains(header, "Security Console")'
- 'contains(body, "nexposeccusername")'
- status_code == 200
condition: and
extractors:
- type: kval
part: header
kval:
- Server