Merge pull request #2869 from securitytest3r/master

Added Lansweeper login page and unauthenticated instance detection
2021-10-11 01:41:46 +05:30 · 2021-10-11 01:41:46 +05:30 · b119801990
parent ea52d761e4 673a9107c5
commit b119801990
2 changed files with 43 additions and 0 deletions
--- a/exposed-panels/lansweeper-login.yaml
+++ b/exposed-panels/lansweeper-login.yaml
@ -0,0 +1,26 @@
+id: lansweeper-login
+
+info:
+  name: Lansweeper Login
+  author: divya_mudgal
+  severity: info
+  tags: lansweeper,tech,panel
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/login.aspx"
+      - "{{BaseURL}}/favicon.ico"
+
+    stop-at-first-match: true
+    matchers-condition: or
+    matchers:
+      - type: word
+        name: login
+        words:
+          - "Lansweeper - Login"
+
+      - type: dsl
+        name: favicon
+        dsl:
+          - "status_code==200 && (\"1847799946\" == mmh3(base64_py(body)))"
--- a/misconfiguration/unauthenticated-lansweeper.yaml
+++ b/misconfiguration/unauthenticated-lansweeper.yaml
@ -0,0 +1,17 @@
+id: unauthenticated-lansweeper
+
+info:
+  name: Unauthenticated Lansweeper Instance
+  author: divya_mudgal
+  severity: high
+  tags: lansweeper,unauth
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/Default.aspx"
+
+    matchers:
+      - type: word
+        words:
+          - "Main page - Lansweeper"