id: black-duck-panel info: name: Black Duck Login Panel - Detect author: idealphase,ritikchaddha severity: info description: | Black Duck login panel was detected. reference: - https://www.blackducksoftware.com/ - https://www.synopsys.com/software-integrity/security-testing/software-composition-analysis.html classification: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N cvss-score: 0.0 cwe-id: CWE-200 metadata: max-request: 1 verified: true shodan-query: http.title:"Black Duck" tags: panel,blackduck,synopsys http: - method: GET path: - "{{BaseURL}}" host-redirects: true max-redirects: 2 matchers-condition: and matchers: - type: regex part: body regex: - '(?m)Black Duck(.*)<\/title>' - type: word part: body words: - 'ProtexLoginPage' - 'CCLoginPage' condition: or - type: status status: - 200 # Enhanced by md on 2022/11/02