Adding additional matchers to hp printers without auth

patch-1
Chapman Schleiss 2022-05-24 15:52:24 -06:00
parent 59e622a83a
commit 8d3c76b67f
1 changed files with 6 additions and 5 deletions

View File

@ -1,23 +1,24 @@
id: unauthorized-hp-officepro-printer
id: unauthorized-hp-printer
info:
name: Unauthorized HP office pro printer
author: pussycat0x
author: pussycat0x,r3naissance
severity: high
metadata:
shodan-dork: http.title:"Hp Officejet pro"
tags: hp,iot,unauth
requests:
- method: GET
path:
- "{{BaseURL}}"
- "{{BaseURL}}/hp/device/webAccess/index.htm?content=security"
matchers-condition: and
matchers:
- type: regex
regex:
- '<title>HP Officejet Pro([ 0-9A-Za-z]+)<\/title>'
- '<title>(HP Officejet Pro([ 0-9A-Za-z]+)|HP Designjet([ 0-9A-Za-z]+).*)<\/title>'
- type: status
status: