Create workresources-rdp.yaml

exposed-panels/workresources-rdp.yaml

@@ -0,0 +1,28 @@
+id: workresources-rdp
+
+info:
+  name: Work Resources RemoteApp and Desktop Connection
+  author: dhiyaneshDK
+  severity: info
+  tags: panel
+  metadata:
+    shodan-query: 'http.title:"RD Web Access"'
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/RDWeb/Pages/en-US/login.aspx'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - 'RD Web Access'
+          - 'WorkSpaceID'
+          - 'PublicModeTimeout'
+          - 'RedirectorName'
+          - 'tdClaimsDomainUserNameLable'
+          - 'trPasswordExpiredNoChange'
+      - type: status
+        status:
+          - 200