Merge pull request #9414 from righettod/amprion_add

Add detection of Amprion Grid Loss login panel instances.
patch-1
pussycat0x 2024-03-25 17:48:50 +05:30 committed by GitHub
commit b22bea0e67
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 33 additions and 0 deletions

View File

@ -0,0 +1,33 @@
id: amprion-gridloss-panel
info:
name: Amprion Grid Loss Login Panel - Detect
author: righettod
severity: info
description: |
Amprion Grid Loss login panel was detected.
reference:
- https://www.amprion.net/index-2.html
metadata:
max-request: 1
verified: true
tags: panel,amprion,login,detect
http:
- method: GET
path:
- "{{BaseURL}}/config/public"
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains(to_lower(body), "amprion") && contains(to_lower(body), "grid loss")'
condition: and
extractors:
- type: regex
part: body
group: 1
regex:
- '"envTitle":"([A-Z0-9a-z]+)"'