Merge pull request #8455 from righettod/add_chronos_tpl

Template to detect instances of ASYS Chronos

http/exposed-panels/chronos-panel.yaml

@@ -0,0 +1,43 @@
+id: chronos-panel
+
+info:
+  name: Chronos Panel - Detect
+  author: righettod
+  severity: info
+  description: |
+    Chronos Login Panel was detected.
+  reference:
+    - https://www.asys.fr/chronos
+  metadata:
+    verified: true
+    max-request: 1
+    shodan-query: http.html:"chronoslogin.js"
+    fofa-query: body="chronoslogin.js"
+  tags: panel,chronos,login,detect
+
+http:
+  - method: GET
+    path:
+      - '{{BaseURL}}/chronos.wsc/asparamlogin.html'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'chronoslogin.html'
+          - 'urlcli'
+          - 'url_portail'
+        condition: and
+        case-insensitive: true
+
+      - type: status
+        status:
+          - 200
+
+    extractors:
+      - type: regex
+        part: body
+        group: 1
+        regex:
+          - '(?i)chronos\s+([0-9.-]+)'