Added Cisco AnyConnect VPN Detection
parent
a326344c5e
commit
87d91d7b1c
|
@ -0,0 +1,27 @@
|
|||
id: cisco-anyconnect-vpn
|
||||
|
||||
info:
|
||||
name: Cisco AnyConnect VPN
|
||||
author: pdteam
|
||||
severity: info
|
||||
reference:
|
||||
- https://github.com/Gilks/hostscan-bypass
|
||||
tags: cisco,panel,vpn
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/CACHE/sdesktop/data.xml"
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- "<config>"
|
||||
- "<hostscan>"
|
||||
condition: and
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
|
@ -11,17 +11,15 @@ requests:
|
|||
path:
|
||||
- "{{BaseURL}}/CACHE/sdesktop/install/start.htm"
|
||||
|
||||
host-redirects: true
|
||||
max-redirects: 2
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
- "<title>Installation</title>"
|
||||
- "WebLaunch"
|
||||
part: body
|
||||
words:
|
||||
- "Installation"
|
||||
- "WebLaunch"
|
||||
condition: and
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
- 200
|
Loading…
Reference in New Issue