Added 3cx-phone-management-panel.yaml (#4015)
* Added 3cx-phone-management-panel.yaml Added 3cx-phone-management-panel.yaml and 3cx-phone-webclient-management-panel.yaml * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>patch-1
parent
970d2e8923
commit
a0a13907fe
|
@ -0,0 +1,28 @@
|
|||
id: 3cx-phone-management-panel
|
||||
|
||||
info:
|
||||
name: 3CX Phone System Management Console Detect
|
||||
author: idealphase
|
||||
severity: info
|
||||
reference:
|
||||
- https://www.3cx.com/
|
||||
- https://www.3cx.com/phone-system/
|
||||
- https://medium.com/@frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88
|
||||
metadata:
|
||||
shodan-query:
|
||||
- http.title:"3CX Phone System Management Console"
|
||||
- http.favicon.hash:970132176
|
||||
google-query: intitle:"3CX Phone System Management Console"
|
||||
tags: panel,3cx
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- '{{BaseURL}}'
|
||||
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
- "3CX Phone System Management Console"
|
||||
- "Welcome to the 3CX Management Console"
|
||||
condition: or
|
|
@ -0,0 +1,26 @@
|
|||
id: 3cx-phone-webclient-management-panel
|
||||
|
||||
info:
|
||||
name: 3CX Phone System Webclient Management Console
|
||||
author: idealphase
|
||||
severity: info
|
||||
reference:
|
||||
- https://www.3cx.com/phone-system/
|
||||
- https://www.3cx.com/blog/unified-communications/client-apps/
|
||||
- https://medium.com/@frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88
|
||||
metadata:
|
||||
shodan-query: http.title:"3CX Webclient"
|
||||
google-query: intitle:"3CX Webclient"
|
||||
tags: panel,3cx
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- '{{BaseURL}}/webclient/'
|
||||
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
- " <title>3CX Webclient</title>"
|
||||
- '<meta name="description" content="3CX">'
|
||||
condition: or
|
|
@ -445,6 +445,8 @@ requests:
|
|||
name: "3cx-phone-system"
|
||||
dsl:
|
||||
- "status_code==200 && (\"970132176\" == mmh3(base64_py(body)))"
|
||||
- "status_code==200 && (\"970132176\" == mmh3(base64_py(body)))"
|
||||
condition: or
|
||||
|
||||
- type: dsl
|
||||
name: "bluehost"
|
||||
|
|
Loading…
Reference in New Issue