Update nexpose-panel.yaml

patch-13
Ritik Chaddha 2024-11-04 11:04:32 +05:30 committed by GitHub
parent 7c7c28308f
commit ad38ffda21
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 8 additions and 16 deletions

View File

@ -1,7 +1,7 @@
id: nexpose-panel
info:
name: Rapid7 Nexpose VM Security Console Login - Panel
name: Rapid7 Nexpose VM Security Console - Detect
author: johnk3r
severity: info
description: |
@ -10,28 +10,20 @@ info:
verified: true
max-request: 1
shodan-query: http.favicon.hash:-516760689
tags: nexpose,panel,login
tags: nexpose,panel,login,detect
http:
- method: GET
path:
- "{{BaseURL}}/login.jsp"
matchers-condition: and
matchers:
- type: regex
part: header
regex:
- "Security Console"
- type: word
part: body
words:
- 'nexposeccusername'
- type: status
status:
- 200
- type: dsl
dsl:
- 'contains(header, "Security Console")'
- 'contains(body, "nexposeccusername")'
- status_code == 200
condition: and
extractors:
- type: kval