Added Cisco AnyConnect VPN Detection

patch-1
sandeep 2022-10-27 21:40:55 +02:00
parent a326344c5e
commit 87d91d7b1c
2 changed files with 31 additions and 6 deletions

View File

@ -0,0 +1,27 @@
id: cisco-anyconnect-vpn
info:
name: Cisco AnyConnect VPN
author: pdteam
severity: info
reference:
- https://github.com/Gilks/hostscan-bypass
tags: cisco,panel,vpn
requests:
- method: GET
path:
- "{{BaseURL}}/CACHE/sdesktop/data.xml"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "<config>"
- "<hostscan>"
condition: and
- type: status
status:
- 200

View File

@ -11,17 +11,15 @@ requests:
path:
- "{{BaseURL}}/CACHE/sdesktop/install/start.htm"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- "<title>Installation</title>"
- "WebLaunch"
part: body
words:
- "Installation"
- "WebLaunch"
condition: and
- type: status
status:
- 200
- 200