Merge pull request #5526 from daffainfo/patch-9

fix: false negative xenforo-detect template
2022-10-01 14:44:27 +05:30 · 2022-10-01 14:44:27 +05:30 · 97573f38c9
parent c33ce0fa4f 130621e483
commit 97573f38c9
2 changed files with 27 additions and 20 deletions
--- a/exposed-panels/xenforo-login.yaml
+++ b/exposed-panels/xenforo-login.yaml
@ -1,20 +0,0 @@
-id: xenforo-login
-
-info:
-  name: XenForo Login/Register
-  author: dhiyaneshDk
-  severity: info
-  metadata:
-    shodan-query: http.title:"XenForo"
-  tags: panel
-
-requests:
-  - method: GET
-    path:
-      - '{{BaseURL}}/index.php'
-
-    matchers:
-      - type: word
-        words:
-          - '<title>XenForo</title>'
-        condition: and
--- a/technologies/xenforo-detect.yaml
+++ b/technologies/xenforo-detect.yaml
@ -0,0 +1,27 @@
+id: xenforo-detect
+
+info:
+  name: XenForo Forum Detection
+  author: dhiyaneshDk,daffainfo
+  severity: info
+  metadata:
+    shodan-query: http.title:"XenForo"
+  tags: tech,xenforo
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/index.php'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - '<html id="XenForo"'
+          - '<html id="XF"'
+        condition: or
+
+      - type: status
+        status:
+          - 200