Merge pull request #5654 from daffainfo/patch-21

fix: false negative mantis-panel

exposed-panels/mantis-detect.yaml

@@ -1,18 +0,0 @@
-id: mantis-detect
-
-info:
-  name: Mantis portal detection
-  author: makyotox
-  severity: info
-  tags: panel,mantis
-
-requests:
-  - method: GET
-    path:
-      - "{{BaseURL}}/login_page.php"
-
-    matchers:
-      - type: word
-        words:
-          - "<title>MantisBT</title>"
-        part: body

exposed-panels/mantisbt-panel.yaml

@@ -0,0 +1,30 @@
+id: mantisbt-panel
+
+info:
+  name: MantisBT Login Panel
+  author: makyotox,daffainfo
+  severity: info
+  reference:
+    - https://www.mantisbt.org/
+  metadata:
+    verified: true
+    shodan-query: http.favicon.hash:662709064
+  tags: panel,mantisbt
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/login_page.php"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'title="MantisBT: Text Search"'
+          - 'title="MantisBT: Issue Id"'
+        condition: or
+
+      - type: status
+        status:
+          - 200

workflows/mantisbt-workflow.yaml

@@ -6,6 +6,6 @@ info:
   description: A simple workflow that runs all MantisBT related nuclei templates on a given target.
 
 workflows:
-  - template: exposed-panels/mantis-detect.yaml
+  - template: exposed-panels/mantisbt-panel.yaml
     subtemplates:
       - tags: mantisbt