id: black-duck-panel

info:
  name: Black Duck Panel
  author: idealphase,ritikchaddha
  severity: info
  description: |
    Black Duck Security Advisories help you avoid being caught off-guard by open source vulnerabilities, both in development and production. And they provide the critical data necessary to prioritize vulnerabilities for remediation, such as exploit info, remediation guidance, severity scoring, and call path analysis.
  reference:
    - https://www.blackducksoftware.com/
    - https://www.synopsys.com/software-integrity/security-testing/software-composition-analysis.html
  metadata:
    verified: true
    shodan-query: http.title:"Black Duck"
  tags: panel,blackduck,synopsys

requests:
  - method: GET
    path:
      - "{{BaseURL}}"

    redirects: true
    max-redirects: 2
    matchers-condition: and
    matchers:

      - type: regex
        part: body
        regex:
          - '(?m)<title>Black Duck(.*)<\/title>'

      - type: word
        part: body
        words:
          - 'ProtexLoginPage'
          - 'CCLoginPage'
        condition: or

      - type: status
        status:
          - 200