🔨 Add Netsweeper WebAdmin detection

2020-07-08 02:26:45 +07:00 · 2020-07-08 02:26:45 +07:00 · f664a763dc
parent 5f42e15fcb
commit f664a763dc
1 changed files with 26 additions and 0 deletions
--- a/technologies/netsweeper-webadmin-detect.yaml
+++ b/technologies/netsweeper-webadmin-detect.yaml
@ -0,0 +1,26 @@
+id: netsweeper-webadmin-detect
+
+info:
+  name: Netsweeper WebAdmin detected
+  author: dwisiswant0
+  severity: informative
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/webadmin/start/"
+      - "{{BaseURL}}/webadmin/tools/systemstatus_remote.php"
+    headers:
+      Referer: "http://{{Hostname}}/webadmin/admin/systemstatus_inc_data.php"
+    matchers-condition: and
+    matchers:
+      - type: regex
+        regex:
+          - "Version: ([\\d.]+)"
+          - "Powered by netsweeper"
+          - "Netsweeper Inc"
+        condition: or
+        part: body
+      - type: status
+        status:
+          - 200