diff --git a/http/exposed-panels/kiteworks-pcn-panel.yaml b/http/exposed-panels/kiteworks-pcn-panel.yaml new file mode 100644 index 0000000000..92eaed2e84 --- /dev/null +++ b/http/exposed-panels/kiteworks-pcn-panel.yaml @@ -0,0 +1,35 @@ +id: kiteworks-pcn-panel + +info: + name: Kiteworks PCN Panel - Detect + author: righettod + severity: info + description: | + Kiteworks PCN Login Panel was detected. + reference: + - https://www.kiteworks.com/platform/private-content-network/ + metadata: + verified: true + max-request: 1 + shodan-query: http.favicon.hash:-1215318992 + tags: panel,kiteworks,login,detect + +http: + - method: GET + path: + - '{{BaseURL}}/login/locales/login_en.json' + + matchers-condition: and + matchers: + - type: word + part: body + words: + - 'Go to Kiteworks.com' + - 'Already a kiteworks user' + - 'Protected by Kiteworks-enabled Private Content Network' + condition: and + case-insensitive: true + + - type: status + status: + - 200