Merge pull request #5671 from daffainfo/patch-23

fix: false negative qnap-qts-panel
patch-1
Prince Chaddha 2022-10-14 17:11:59 +05:30 committed by GitHub
commit c4ad58c98d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 8 deletions

View File

@ -1,32 +1,33 @@
id: qnap-qts-panel
info:
name: QNAP - QTS Panel Discovery
author: idealphase
name: QNAP - QTS login panel
author: idealphase,daffainfo
severity: info
description: |
QNAP QTS Panel was discovered.
QTS (QNAP Turbo NAS System) is the Turbo NAS Operating System, providing file storage, backup, disaster recovery, security management and virtualization applications for businesses
reference:
- https://www.qnap.com/en?ref=header_logo
- https://www.qnap.com/qts/
metadata:
verified: true
shodan-query: product:"QNAP"
classification:
cvss-score: 0.0
cwe-id: CWE-200
google-query: intitle:"QNAP Turbo NAS" inurl:/cgi-bin
tags: panel,qnap,qts
requests:
- method: GET
path:
- "{{BaseURL}}/cgi-bin/"
- "{{BaseURL}}/cgi-bin/html/login.html"
redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
part: body
words:
- "<title>QNAP Turbo NAS</title>"
- "QNAP Turbo NAS</title>"
- type: status
status: