diff --git a/http/exposed-panels/filebrowser-login-panel.yaml b/http/exposed-panels/filebrowser-login-panel.yaml new file mode 100644 index 0000000000..087d9a5df7 --- /dev/null +++ b/http/exposed-panels/filebrowser-login-panel.yaml @@ -0,0 +1,36 @@ +id: filebrowser-login-panel + +info: + name: File Browser Login Panel - Detect + author: ritikchaddha + severity: info + reference: + - https://filebrowser.org/ + metadata: + max-request: 2 + verified: true + shodan-query: http.favicon.hash:1052926265 + tags: panel,filebrowser,detect + +http: + - method: GET + path: + - "{{BaseURL}}" + - "{{BaseURL}}/login" + - "{{BaseURL}}/static/img/icons/favicon-32x32.png" + + stop-at-first-match: true + host-redirects: true + max-redirects: 2 + matchers-condition: or + matchers: + - type: word + part: body + words: + - 'File Browser' + - 'window.FileBrowser' + condition: or + + - type: dsl + dsl: + - "status_code==200 && ('1052926265' == mmh3(base64_py(body)))"