diff --git a/http/exposed-panels/chronos-panel.yaml b/http/exposed-panels/chronos-panel.yaml new file mode 100644 index 0000000000..fc00b9489f --- /dev/null +++ b/http/exposed-panels/chronos-panel.yaml @@ -0,0 +1,43 @@ +id: chronos-panel + +info: + name: Chronos Panel - Detect + author: righettod + severity: info + description: | + Chronos Login Panel was detected. + reference: + - https://www.asys.fr/chronos + metadata: + verified: true + max-request: 1 + shodan-query: http.html:"chronoslogin.js" + fofa-query: body="chronoslogin.js" + tags: panel,chronos,login,detect + +http: + - method: GET + path: + - '{{BaseURL}}/chronos.wsc/asparamlogin.html' + + matchers-condition: and + matchers: + - type: word + part: body + words: + - 'chronoslogin.html' + - 'urlcli' + - 'url_portail' + condition: and + case-insensitive: true + + - type: status + status: + - 200 + + extractors: + - type: regex + part: body + group: 1 + regex: + - '(?i)chronos\s+([0-9.-]+)'