diff --git a/http/exposed-panels/easyjob-panel.yaml b/http/exposed-panels/easyjob-panel.yaml new file mode 100644 index 0000000000..40208e555f --- /dev/null +++ b/http/exposed-panels/easyjob-panel.yaml @@ -0,0 +1,33 @@ +id: easyjob-panel + +info: + name: EasyJOB Login Panel + author: righettod + severity: info + description: | + EasyJOB login panel was detected. + reference: + - https://www.en.because-software.com/software/easyjob/ + metadata: + verified: true + shodan-query: http.title:"Log in - easyJOB" + tags: panel,easyjob,login + +http: + - method: GET + path: + - "{{BaseURL}}/easy/app/Account/Login" + + matchers: + - type: dsl + dsl: + - 'status_code == 200' + - 'contains(body, "easyJOB") && contains(body, "/easy/app/") && contains(body, "because-software.com")' + condition: and + + extractors: + - type: regex + part: body + group: 1 + regex: + - 'easyJOB\s+([0-9.]+)' \ No newline at end of file