Added template for unigui-server-monitor-exposure

unigui-server-monitor-exposure.yaml

@@ -0,0 +1,34 @@
+id: unigui-server-monitor-exposure
+
+info:
+  name: UniGUI Server Monitor Panel Exposure
+  author: serrapa
+  severity: medium
+  description: Detects exposed UniGUI Server Monitor Panels which could reveal sensitive server statistics, users sessions, licensing information and others data.
+  reference:
+    - https://www.unigui.com/doc/online_help/using-server-monitor-(server-c.htm
+  tags: exposure,unigui
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/server"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "uniGUI Standalone Server"
+          - "uniGUI License Information"
+          - "Server Statistics"
+        part: body
+
+      - type: status
+        status:
+          - 200
+
+      - type: dsl
+        dsl:
+          - "contains(body, 'layout:\"fit\",title:\"uniGUI Standalone Server\"')"
+          - "contains(body, 'layout:\"absolute\",title:\"Server Statistics\"')"
+