Update axway-api-manager-panel.yaml

main
Dominique RIGHETTO 2024-08-09 07:24:12 +02:00 committed by GitHub
parent 6b679a107f
commit d6b4f76166
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 20 additions and 11 deletions

View File

@ -2,27 +2,36 @@ id: axway-api-manager-panel
info: info:
name: Axway API Manager Panel - Detect name: Axway API Manager Panel - Detect
author: johnk3r author: johnk3r,righettod
severity: info severity: info
description: Axway API Manager panel was detected.
reference:
- https://docs.axway.com/bundle/axway-open-docs/page/docs/index.html
- https://www.postman.com/api-evangelist/axway/api/06c40de2-3954-4c68-ae10-a7eded330b05
- https://www.postman.com/api-evangelist/axway/api/ce2ac156-4353-46b9-b148-944ab7721ed6
metadata: metadata:
verified: true verified: true
max-request: 1 max-request: 1
shodan-query: http.title:"Axway API Manager Login" shodan-query: http.title:"Axway API Manager Login"
tags: panel,axway,detect tags: panel,axway,detect,login
http: http:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/api/portal/v1.4/appinfo"
- "{{BaseURL}}" - "{{BaseURL}}"
matchers-condition: and stop-at-first-match: true
matchers: matchers:
- type: word - type: dsl
part: body dsl:
words: - 'status_code == 200'
- "Axway API Manager Login</title>" - 'contains_any(to_lower(body), "axway api manager login", "vordel/apiportal/app-login", "api manager", "api portal")'
condition: and
- type: status extractors:
status: - type: regex
- 200 part: body
# digest: 4b0a004830460221009806e6b46f0d419351aea507da113cdc16e7d0bb46d91d3356f8404c5aacd303022100d97a07a55afba6cc59ae9c4884f13cdff91afe76fb8f880dfe067c7e963d6920:922c64590222798bb761d5b6d8e72950 group: 1
regex:
- '"productVersion":\s*"([0-9.]+)"'