diff --git a/http/exposed-panels/jboss/jboss-soa-platform.yaml b/http/exposed-panels/jboss/jboss-soa-platform.yaml index 1708de560e..f2d8edf366 100644 --- a/http/exposed-panels/jboss/jboss-soa-platform.yaml +++ b/http/exposed-panels/jboss/jboss-soa-platform.yaml @@ -2,7 +2,7 @@ id: jboss-soa-platform info: name: JBoss SOA Platform Login Panel - Detect - author: ritikchaddha + author: ritikchaddha,righettod severity: info description: JBoss SOA Platform login panel was detected. classification: @@ -19,21 +19,32 @@ info: - http.title:"welcome to the jboss soa platform" fofa-query: title="welcome to the jboss soa platform" google-query: intitle:"welcome to the jboss soa platform" - tags: panel,jboss,soa,redhat + tags: panel,jboss,soa,redhat,detect http: - method: GET path: + - '{{BaseURL}}/css/footer.js' - '{{BaseURL}}' + stop-at-first-match: true + matchers-condition: and matchers: - type: word part: body words: - 'Welcome to the JBoss SOA Platform' + - 'JBoss Enterprise SOA Platform: Embedded ESB Server' + condition: or - type: status status: - 200 -# digest: 4a0a00473045022100aed0fadeeedc41d0cbf6c03ea9eadbf500bb65cc8aaa155885b8a0f9d4161a4502206c1f51535fa466810b6f1bb968d8bbaf1da7874dcd3e8c40b35cd91deb265564:922c64590222798bb761d5b6d8e72950 \ No newline at end of file + + extractors: + - type: regex + part: body + group: 1 + regex: + - '(?i)Version\s+([A-Z0-9.]+)'