id: moveit-transfer-detect

info:
  name: Moveit File Transfer - Detect
  author: tess
  severity: info
  metadata:
    verified: true
    max-request: 2
    shodan-query: html:"human.aspx"
  tags: tech,moveit

http:
  - method: GET
    path:
      - '{{BaseURL}}'
      - '{{BaseURL}}/human.aspx'

    stop-at-first-match: true

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'stylesheet_MOVEit'
          - 'moveit.transfer'
          - 'MOVEitPopUp'
          - 'MOVEit Automation'
        condition: or
        case-insensitive: true

      - type: status
        status:
          - 200