Create wsftp-detect.yaml (#8285)

* Create wsftp-detect.yaml

* Update and rename wsftp-detect.yaml to wsftp-ssh-detect.yaml

* Update and rename wsftp-ssh-detect.yaml to ws_ftp-ssh-detect.yaml

* Create ws_ftp-server-web-transfer.yaml

* misc update

* Update ws_ftp-server-web-transfer.yaml

* Update ws_ftp-ssh-detect.yaml

---------

Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>

http/exposed-panels/ws_ftp-server-web-transfer.yaml

@@ -0,0 +1,38 @@
+id: ws_ftp-server-web-transfer
+
+info:
+  name: WS_FTP Server Web Transfer - Panel Detect
+  author: johnk3r
+  severity: info
+  description: WS_FTP Server Web Transfer panel was detected.
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
+    cvss-score: 0.0
+    cwe-id: CWE-200
+  metadata:
+    max-request: 1
+    verified: true
+    vendor: progress
+    product: ws_ftp
+    shodan-query: http.title:"WS_FTP Server Web Transfer"
+  tags: panel,ws_ftp
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    host-redirects: true
+    max-redirects: 3
+    stop-at-first-match: true
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'WS_FTP Server Web Transfer Client'
+        condition: and
+
+      - type: status
+        status:
+          - 200

network/detection/ws_ftp-ssh-detect.yaml

@@ -0,0 +1,34 @@
+id: ws_ftp-ssh-detect
+
+info:
+  name: WS_FTP-SSH Service - Detect
+  author: johnk3r
+  severity: info
+  description: |
+    WS_FTP-SSH service was detected.
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
+    cvss-score: 0.0
+    cwe-id: CWE-200
+  metadata:
+    verified: true
+    max-request: 1
+    vendor: progress
+    product: ws_ftp
+    shodan-query: "WS_FTP port:22"
+  tags: network,ssh,ws_ftp
+
+tcp:
+  - host:
+      - "{{Hostname}}"
+    port: 22
+
+    matchers:
+      - type: regex
+        regex:
+          - '(?i)WS_FTP-SSH'
+
+    extractors:
+      - type: regex
+        regex:
+          - '(?i)SSH-(.*)-WS_FTP-SSH[^\r]+'