Merge pull request #10271 from righettod/jbosssoa-upd

Add more matchers/extractors to the "JBoss SOA Platform" login panel detection template.

http/exposed-panels/jboss/jboss-soa-platform.yaml

@@ -2,7 +2,7 @@ id: jboss-soa-platform
 
 info:
   name: JBoss SOA Platform Login Panel - Detect
-  author: ritikchaddha
+  author: ritikchaddha,righettod
   severity: info
   description: JBoss SOA Platform login panel was detected.
   classification:
@@ -19,21 +19,32 @@ info:
       - http.title:"welcome to the jboss soa platform"
     fofa-query: title="welcome to the jboss soa platform"
     google-query: intitle:"welcome to the jboss soa platform"
-  tags: panel,jboss,soa,redhat
+  tags: panel,jboss,soa,redhat,detect
 
 http:
   - method: GET
     path:
+      - '{{BaseURL}}/css/footer.js'
       - '{{BaseURL}}'
 
+    stop-at-first-match: true
+
     matchers-condition: and
     matchers:
       - type: word
         part: body
         words:
           - 'Welcome to the JBoss SOA Platform'
+          - 'JBoss Enterprise SOA Platform: Embedded ESB Server'
+        condition: or
 
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100aed0fadeeedc41d0cbf6c03ea9eadbf500bb65cc8aaa155885b8a0f9d4161a4502206c1f51535fa466810b6f1bb968d8bbaf1da7874dcd3e8c40b35cd91deb265564:922c64590222798bb761d5b6d8e72950
+
+    extractors:
+      - type: regex
+        part: body
+        group: 1
+        regex:
+          - '(?i)Version\s+([A-Z0-9.]+)'