diff --git a/http/exposed-panels/seafile-panel.yaml b/http/exposed-panels/seafile-panel.yaml index 9f21760216..c7ae099709 100644 --- a/http/exposed-panels/seafile-panel.yaml +++ b/http/exposed-panels/seafile-panel.yaml @@ -2,12 +2,9 @@ id: seafile-panel info: name: Seafile Panel - Detect - author: TechbrunchFR, righettod + author: TechbrunchFR,righettod severity: info description: Seafile panel was detected. - metadata: - max-request: 1 - shodan-query: http.favicon.hash:1552322396 reference: - https://www.seafile.com/en/home/ - https://github.com/haiwen/seafile @@ -15,31 +12,23 @@ info: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N cvss-score: 0.0 cwe-id: CWE-200 - tags: sefile,panel + metadata: + max-request: 1 + shodan-query: http.favicon.hash:1552322396 + verified: true + tags: sefile,panel,login http: - method: GET path: - - "{{BaseURL}}/media/favicons/favicon.png" + - "{{BaseURL}}/accounts/login/" + host-redirects: true max-redirects: 2 + matchers-condition: and matchers: - type: dsl dsl: - - "status_code==200 && (\"1552322396\" == mmh3(base64_py(body)))" - - - method: GET - path: - - "{{BaseURL}}/accounts/login/" - matchers-condition: and - matchers: - - type: word - part: body - words: - - 'SEAFILE_GLOBAL' - - 'seafile-ui.css' + - "status_code==200" + - 'contains(body, "SEAFILE_GLOBAL") && contains(body, "seafile-ui.css")' condition: and - - - type: status - status: - - 200