From 22deaa2dac6b71ff8a89870f41115715ae00cd27 Mon Sep 17 00:00:00 2001 From: Muhammad Daffa <36522826+daffainfo@users.noreply.github.com> Date: Sat, 1 Oct 2022 11:38:19 +0700 Subject: [PATCH 1/3] fix: false negative xenforo-detect template - Move the folder from `exposed-panels` to `technologies` - Change the word matcher to prevent false negative - Added status matcher --- exposed-panels/xenforo-login.yaml | 20 -------------------- technologies/xenforo-detect.yaml | 27 +++++++++++++++++++++++++++ 2 files changed, 27 insertions(+), 20 deletions(-) delete mode 100644 exposed-panels/xenforo-login.yaml create mode 100644 technologies/xenforo-detect.yaml diff --git a/exposed-panels/xenforo-login.yaml b/exposed-panels/xenforo-login.yaml deleted file mode 100644 index ee41e978a0..0000000000 --- a/exposed-panels/xenforo-login.yaml +++ /dev/null @@ -1,20 +0,0 @@ -id: xenforo-login - -info: - name: XenForo Login/Register - author: dhiyaneshDk - severity: info - metadata: - shodan-query: http.title:"XenForo" - tags: panel - -requests: - - method: GET - path: - - '{{BaseURL}}/index.php' - - matchers: - - type: word - words: - - 'XenForo' - condition: and diff --git a/technologies/xenforo-detect.yaml b/technologies/xenforo-detect.yaml new file mode 100644 index 0000000000..018fb860ff --- /dev/null +++ b/technologies/xenforo-detect.yaml @@ -0,0 +1,27 @@ +id: xenforo-detect + +info: + name: XenForo Forum Detection + author: dhiyaneshDk,daffainfo + severity: info + metadata: + shodan-query: http.title:"XenForo" + tags: panel,xenforo + +requests: + - method: GET + path: + - '{{BaseURL}}/index.php' + + matchers-condition: and + matchers: + - type: word + part: body + words: + - ' Date: Sat, 1 Oct 2022 14:41:27 +0530 Subject: [PATCH 3/3] Update xenforo-detect.yaml --- technologies/xenforo-detect.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/technologies/xenforo-detect.yaml b/technologies/xenforo-detect.yaml index 018fb860ff..c17249ffad 100644 --- a/technologies/xenforo-detect.yaml +++ b/technologies/xenforo-detect.yaml @@ -6,7 +6,7 @@ info: severity: info metadata: shodan-query: http.title:"XenForo" - tags: panel,xenforo + tags: tech,xenforo requests: - method: GET