From bec3a8713da7b723933bc6bfbd1534e5d603d877 Mon Sep 17 00:00:00 2001
From: Dominique RIGHETTO <righettod@users.noreply.github.com>
Date: Sat, 8 Jan 2022 13:18:57 +0100
Subject: [PATCH] Add detection for Manage Engine Key Manager Plus (#3503)

* Add KPM tpl

* Added optional favicon based detection

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
---
 .../zoho/manageengine-keymanagerplus.yaml     | 30 +++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 exposed-panels/zoho/manageengine-keymanagerplus.yaml

diff --git a/exposed-panels/zoho/manageengine-keymanagerplus.yaml b/exposed-panels/zoho/manageengine-keymanagerplus.yaml
new file mode 100644
index 0000000000..f1bac62f3b
--- /dev/null
+++ b/exposed-panels/zoho/manageengine-keymanagerplus.yaml
@@ -0,0 +1,30 @@
+id: manageengine-keymanagerplus
+
+info:
+  name: ZOHO ManageEngine KeyManagerPlus
+  author: righettod
+  severity: info
+  reference: https://www.manageengine.com/key-manager/
+  tags: panel,zoho,manageengine
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/apiclient/index.jsp'
+      - '{{BaseURL}}/pki/images/keyManager_title.ico'
+
+    stop-at-first-match: true
+    matchers-condition: or
+    matchers:
+
+      - type: dsl
+        dsl:
+          - "status_code==200"
+          - "contains(tolower(body), '<title>key manager plus</title>')"
+        condition: and
+
+      - type: dsl
+        dsl:
+          - "status_code==200"
+          - "('192917117' == mmh3(base64_py(body)))"
+        condition: and
\ No newline at end of file