id: concrete5-panel info: name: Concrete5 Login Panel - Detect author: dhiyaneshDk severity: info description: Concrete5 login panel was detected. classification: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N cwe-id: CWE-200 cpe: cpe:2.3:a:concrete5:concrete5:*:*:*:*:*:*:*:* metadata: max-request: 1 vendor: concrete5 product: concrete5 shodan-query: - http.title:"concrete5" - cpe:"cpe:2.3:a:concrete5:concrete5" - http.title:"install concrete5" fofa-query: - title="install concrete5" - title="concrete5" google-query: - intitle:"concrete5" - intitle:"install concrete5" tags: panel,concrete5,cms http: - method: GET path: - '{{BaseURL}}/index.php/login' host-redirects: true max-redirects: 2 matchers: - type: regex part: body regex: - '(?mi)(.*)concrete5(.*)<\/title>' - '(?mi)content="concrete5 - (.*)' condition: or extractors: - type: regex part: body group: 1 regex: - 'content="concrete5 \- ([0-9.]+)"\/>' - 'Version ([0-9.]+)' # digest: 490a00463044022015f25608530b602648424e78a0d3a60177f9c57e3b3e4f3ce19f84b9f5aaee7502200d944eb9830b84d2f6c8355c7714045228128b299015df2065e5a543a5c7aabc:922c64590222798bb761d5b6d8e72950