From 95b5c1ab1e69acb81a2366571280f4e561bda710 Mon Sep 17 00:00:00 2001 From: geeknik <466878+geeknik@users.noreply.github.com> Date: Fri, 7 Oct 2022 19:32:37 +0000 Subject: [PATCH 1/3] Create nordex-control-wind-farm-portal.yaml --- .../nordex-control-wind-farm-portal.yaml | 33 +++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 exposed-panels/nordex-control-wind-farm-portal.yaml diff --git a/exposed-panels/nordex-control-wind-farm-portal.yaml b/exposed-panels/nordex-control-wind-farm-portal.yaml new file mode 100644 index 0000000000..d90674eb35 --- /dev/null +++ b/exposed-panels/nordex-control-wind-farm-portal.yaml @@ -0,0 +1,33 @@ +id: nordex-control-wind-farm-portal + +info: + name: Nordex Control - Wind Farm Portal + author: geeknik + severity: info + description: A Nordex Control Wind Farm Portal was detected. + reference: + - https://www.nordex-online.com/en/ + tags: panel,nordex,iot + +requests: + - method: GET + path: + - "{{BaseURL}}/11_06_12/index_en.jsp" + - "{{BaseURL}}/11_06_13/index_en.jsp" + - "{{BaseURL}}/13_04_00/index_en.jsp" + - "{{BaseURL}}/13_04_01/index_en.jsp" + - "{{BaseURL}}/13_06_04/index_en.jsp" + + stop-at-first-match: true + matchers-condition: and + matchers: + - type: word + words: + - "Nordex Control" + - "Wind Farm Portal" + - "Nordex Control Login" + condition: and + + - type: status + status: + - 200 From dca81cfdae807cd6174a4e83a0cda8e2ffc3a2b9 Mon Sep 17 00:00:00 2001 From: geeknik <466878+geeknik@users.noreply.github.com> Date: Fri, 7 Oct 2022 19:36:15 +0000 Subject: [PATCH 2/3] Update nordex-control-wind-farm-portal.yaml --- exposed-panels/nordex-control-wind-farm-portal.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/exposed-panels/nordex-control-wind-farm-portal.yaml b/exposed-panels/nordex-control-wind-farm-portal.yaml index d90674eb35..8c64e4abda 100644 --- a/exposed-panels/nordex-control-wind-farm-portal.yaml +++ b/exposed-panels/nordex-control-wind-farm-portal.yaml @@ -25,7 +25,7 @@ requests: words: - "Nordex Control" - "Wind Farm Portal" - - "Nordex Control Login" + - "Wind Farm Total Summary" condition: and - type: status From 6915caac50e2b8eda2635f9b257ffe07b08e85df Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Sat, 8 Oct 2022 12:38:34 +0530 Subject: [PATCH 3/3] Update and rename nordex-control-wind-farm-portal.yaml to nordex-wind-farm-portal.yaml --- ...rtal.yaml => nordex-wind-farm-portal.yaml} | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) rename exposed-panels/{nordex-control-wind-farm-portal.yaml => nordex-wind-farm-portal.yaml} (53%) diff --git a/exposed-panels/nordex-control-wind-farm-portal.yaml b/exposed-panels/nordex-wind-farm-portal.yaml similarity index 53% rename from exposed-panels/nordex-control-wind-farm-portal.yaml rename to exposed-panels/nordex-wind-farm-portal.yaml index 8c64e4abda..86edee9db7 100644 --- a/exposed-panels/nordex-control-wind-farm-portal.yaml +++ b/exposed-panels/nordex-wind-farm-portal.yaml @@ -1,4 +1,4 @@ -id: nordex-control-wind-farm-portal +id: nordex-wind-farm-portal info: name: Nordex Control - Wind Farm Portal @@ -7,26 +7,26 @@ info: description: A Nordex Control Wind Farm Portal was detected. reference: - https://www.nordex-online.com/en/ + metadata: + verified: true + shodan-query: http.html:"Nordex Control" tags: panel,nordex,iot requests: - method: GET path: - - "{{BaseURL}}/11_06_12/index_en.jsp" - - "{{BaseURL}}/11_06_13/index_en.jsp" - - "{{BaseURL}}/13_04_00/index_en.jsp" - - "{{BaseURL}}/13_04_01/index_en.jsp" - - "{{BaseURL}}/13_06_04/index_en.jsp" + - "{{BaseURL}}" - stop-at-first-match: true + redirects: true + max-redirects: 2 matchers-condition: and matchers: - type: word + part: body words: - - "Nordex Control" + - "Nordex Control" - "Wind Farm Portal" - - "Wind Farm Total Summary" - condition: and + condition: or - type: status status: