Merge pull request #9896 from dcruzec/main

cisco-firepower-management-login

http/exposed-panels/cisco-firepower-panel.yaml

@@ -0,0 +1,41 @@
+id: cisco-firepower-panel
+
+info:
+  name: Cisco Firepower Management Center login - Detect
+  author: Charles D
+  severity: info
+  description: |
+    Cisco Firepower Management Centerlogin panel was detected
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
+    cwe-id: CWE-200
+  metadata:
+    max-request: 1
+    shodan-query: html:"cisco firepower management"
+    verified: true
+  tags: login,cisco,panel,console
+
+http:
+  - method: GET
+    path:
+      - '{{BaseURL}}/ui/login'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "Cisco Firepower Management Center"
+          - "Login"
+        condition: and
+
+      - type: status
+        status:
+          - 200
+
+    extractors:
+      - type: regex
+        part: body
+        group: 1
+        regex:
+          - "'version':\\s*'(\\d+\\.\\d+\\.\\d+)'"