Added exposed-panels/proxmox-panel.yaml

exposed-panels/proxmox-panel.yaml

@@ -0,0 +1,43 @@
+id: proxmox-panel
+
+info:
+  name: Proxmox Virtual Environment Login Panel - Detect
+  author: lum8rjack
+  severity: info
+  description: Proxmox Virtual Environment login panel was detected.
+  reference: https://www.proxmox.com/
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
+    cvss-score: 0.0
+    cwe-id: CWE-200
+  metadata:
+    verified: "true"
+    shodan-query:
+      - http.title:"Proxmox Virtual Environment"
+      - "Server: pve-api-daemon"
+  tags: panel,proxmox
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "Proxmox Virtual Environment</title>"
+          - "auth_cookie_name: 'PVEAuthCookie'"
+        condition: or
+
+      - type: status
+        status:
+          - 200
+
+    extractors:
+      - type: regex
+        part: body
+        group: 1
+        regex:
+          - "(?:pvemanagerlib.js[?](ver=[0-9]{1}[.][0-9]{1,}[-][0-9]))"