diff --git a/exposed-panels/mfiles-web-detect.yaml b/exposed-panels/mfiles-web-detect.yaml new file mode 100644 index 0000000000..99d777aae2 --- /dev/null +++ b/exposed-panels/mfiles-web-detect.yaml @@ -0,0 +1,33 @@ +id: mfiles-web-detect + +info: + name: M-Files Web Panel Detect + author: Nodauf + severity: info + reference: + - https://www.m-files.com/about/trust-center/security-advisories/ + metadata: + verified: true + shodan-query: http.html:"M-Files Web" + tags: panel,m-files + +requests: + - method: GET + path: + - "{{BaseURL}}" + - "{{BaseURL}}/Login.aspx" + + stop-at-first-match: true + matchers-condition: or + matchers: + - type: regex + part: body + regex: + - '(.*)M-Files Web(.*)' + + - type: word + part: body + words: + - 'M-Files user' + - 'M-Files authentication' + condition: or diff --git a/technologies/mfiles-detect.yaml b/technologies/mfiles-detect.yaml deleted file mode 100644 index 4450b18db0..0000000000 --- a/technologies/mfiles-detect.yaml +++ /dev/null @@ -1,28 +0,0 @@ -id: MFiles-Web-detect - -info: - name: Detect M-Files Web - author: Nodauf - severity: info - tags: tech,M-Files - reference: - - https://www.m-files.com/about/trust-center/security-advisories/ - -requests: - - method: GET - path: - - "{{BaseURL}}/Login.aspx" - - matchers: - - type: word - part: body - words: - - 'M-Files Web' - - extractors: - - type: regex - name: version - part: body - group: 1 - regex: - - 'config_minified\.css\?v=([0-9]{2}\.[0-9]{2}\.[0-9]+\.[0-9]+)'