Merge pull request #10462 from rxerium/procore-detect

Procore Detection
patch-10
Dhiyaneshwaran 2024-08-16 22:42:33 -07:00 committed by GitHub
commit b630c26bbf
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 31 additions and 0 deletions

View File

@ -0,0 +1,31 @@
id: procore-panel
info:
name: Procore Login - Panel
author: rxerium
severity: info
metadata:
max-request: 2
verified: true
shodan-query: http.favicon.hash:1952289652
tags: panel,login,detect,procore
http:
- method: GET
path:
- "{{BaseURL}}"
- "{{BaseURL}}/favicon.ico"
- "{{BaseURL}}/images/favicon.ico"
stop-at-first-match: true
matchers-condition: or
matchers:
- type: dsl
dsl:
- "status_code==200 && (\"1952289652\" == mmh3(base64_py(body)))"
- type: word
words:
- '<title>Procore Log In</title>'
- 'Log in to your Procore account using your email and password'
condition: and