diff --git a/exposed-panels/3cx-phone-management-panel.yaml b/exposed-panels/3cx-phone-management-panel.yaml new file mode 100644 index 0000000000..1d7a536697 --- /dev/null +++ b/exposed-panels/3cx-phone-management-panel.yaml @@ -0,0 +1,28 @@ +id: 3cx-phone-management-panel + +info: + name: 3CX Phone System Management Console Detect + author: idealphase + severity: info + reference: + - https://www.3cx.com/ + - https://www.3cx.com/phone-system/ + - https://medium.com/@frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88 + metadata: + shodan-query: + - http.title:"3CX Phone System Management Console" + - http.favicon.hash:970132176 + google-query: intitle:"3CX Phone System Management Console" + tags: panel,3cx + +requests: + - method: GET + path: + - '{{BaseURL}}' + + matchers: + - type: word + words: + - "3CX Phone System Management Console" + - "Welcome to the 3CX Management Console" + condition: or diff --git a/exposed-panels/3cx-phone-webclient-management-panel.yaml b/exposed-panels/3cx-phone-webclient-management-panel.yaml new file mode 100644 index 0000000000..1c4be16616 --- /dev/null +++ b/exposed-panels/3cx-phone-webclient-management-panel.yaml @@ -0,0 +1,26 @@ +id: 3cx-phone-webclient-management-panel + +info: + name: 3CX Phone System Webclient Management Console + author: idealphase + severity: info + reference: + - https://www.3cx.com/phone-system/ + - https://www.3cx.com/blog/unified-communications/client-apps/ + - https://medium.com/@frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88 + metadata: + shodan-query: http.title:"3CX Webclient" + google-query: intitle:"3CX Webclient" + tags: panel,3cx + +requests: + - method: GET + path: + - '{{BaseURL}}/webclient/' + + matchers: + - type: word + words: + - " 3CX Webclient" + - '' + condition: or \ No newline at end of file diff --git a/technologies/favicon-detection.yaml b/technologies/favicon-detection.yaml index 6211206af3..36d2688f6c 100644 --- a/technologies/favicon-detection.yaml +++ b/technologies/favicon-detection.yaml @@ -445,6 +445,8 @@ requests: name: "3cx-phone-system" dsl: - "status_code==200 && (\"970132176\" == mmh3(base64_py(body)))" + - "status_code==200 && (\"970132176\" == mmh3(base64_py(body)))" + condition: or - type: dsl name: "bluehost"