id: fireware-xtm-user-authentication

info:
  name: Fireware XTM Login Panel - Detect
  author: dhiyaneshDK
  severity: info
  description: Fireware XTM login panel was detected.
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
    max-request: 1
    shodan-query: http.title:"Fireware XTM User Authentication"
  tags: panel

http:
  - method: GET
    path:
      - '{{BaseURL}}/sslvpn_logon.shtml'

    matchers-condition: and
    matchers:
      - type: word
        words:
          - '<title>User Authentication'

      - type: status
        status:
          - 200

# digest: 4a0a00473045022100d044b71381575b0b34791247fdb14bbe286b152c3346e804a337446d48aa30620220169956313aa7d47b9f71ddfd6da3b5c07f63e1969868ee97bb8d5fedda86431f:922c64590222798bb761d5b6d8e72950