Merge pull request #5526 from daffainfo/patch-9

fix: false negative xenforo-detect template
patch-1
Prince Chaddha 2022-10-01 14:44:27 +05:30 committed by GitHub
commit 97573f38c9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 27 additions and 20 deletions

View File

@ -1,20 +0,0 @@
id: xenforo-login
info:
name: XenForo Login/Register
author: dhiyaneshDk
severity: info
metadata:
shodan-query: http.title:"XenForo"
tags: panel
requests:
- method: GET
path:
- '{{BaseURL}}/index.php'
matchers:
- type: word
words:
- '<title>XenForo</title>'
condition: and

View File

@ -0,0 +1,27 @@
id: xenforo-detect
info:
name: XenForo Forum Detection
author: dhiyaneshDk,daffainfo
severity: info
metadata:
shodan-query: http.title:"XenForo"
tags: tech,xenforo
requests:
- method: GET
path:
- '{{BaseURL}}/index.php'
matchers-condition: and
matchers:
- type: word
part: body
words:
- '<html id="XenForo"'
- '<html id="XF"'
condition: or
- type: status
status:
- 200