diff --git a/http/exposed-panels/airos-detect.yaml b/http/exposed-panels/airos-detect.yaml new file mode 100644 index 0000000000..872a18bd38 --- /dev/null +++ b/http/exposed-panels/airos-detect.yaml @@ -0,0 +1,18 @@ +id: airos-detect + +info: + name: AIROS software detection + author: rxerium + severity: info + description: | + This template checks if the AIROS logo image is exposed at `/images/airos_logo.png` endpoint. If it returns a status code 200, it might indicate exposure of sensitive resources. + +requests: + - method: GET + path: + - "{{BaseURL}}/images/airos_logo.png" + + matchers: + - type: status + status: + - 200 \ No newline at end of file