From c173bf3c5c0f4ebf63bc522d40d2487c969be1bf Mon Sep 17 00:00:00 2001
From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com>
Date: Tue, 12 Mar 2024 14:32:53 +0530
Subject: [PATCH] Create posteio-admin-panel.yaml

---
 http/exposed-panels/posteio-admin-panel.yaml | 30 ++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 http/exposed-panels/posteio-admin-panel.yaml

diff --git a/http/exposed-panels/posteio-admin-panel.yaml b/http/exposed-panels/posteio-admin-panel.yaml
new file mode 100644
index 0000000000..253b10b771
--- /dev/null
+++ b/http/exposed-panels/posteio-admin-panel.yaml
@@ -0,0 +1,30 @@
+id: posteio-admin-panel
+
+info:
+  name: Poste.io Admin Panel - Detect
+  author: ritikchaddha
+  severity: info
+  description: Poste.io login panel was detected.
+  metadata:
+    verified: true
+    max-request: 1
+    shodan-query: title:"Administration login" html:"poste<span"
+  tags: panel,poste,login,detect
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/admin/login"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "poste<span"
+          - "Administration login"
+        condition: and
+
+      - type: status
+        status:
+          - 200