From a8ab2d487ae278aeb3f3b45c0f0a6a78799bd2a0 Mon Sep 17 00:00:00 2001
From: Dhiyaneshwaran <leedhiyanesh@gmail.com>
Date: Sun, 24 Oct 2021 22:57:46 +0530
Subject: [PATCH] Create workresources-rdp.yaml

---
 exposed-panels/workresources-rdp.yaml | 28 +++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 exposed-panels/workresources-rdp.yaml

diff --git a/exposed-panels/workresources-rdp.yaml b/exposed-panels/workresources-rdp.yaml
new file mode 100644
index 0000000000..6097220ed9
--- /dev/null
+++ b/exposed-panels/workresources-rdp.yaml
@@ -0,0 +1,28 @@
+id: workresources-rdp
+
+info:
+  name: Work Resources RemoteApp and Desktop Connection
+  author: dhiyaneshDK
+  severity: info
+  tags: panel
+  metadata:
+    shodan-query: 'http.title:"RD Web Access"'
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/RDWeb/Pages/en-US/login.aspx'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - 'RD Web Access'
+          - 'WorkSpaceID'
+          - 'PublicModeTimeout'
+          - 'RedirectorName'
+          - 'tdClaimsDomainUserNameLable'
+          - 'trPasswordExpiredNoChange'
+      - type: status
+        status:
+          - 200