nuclei-templates/http/exposed-panels/globalprotect-panel.yaml

31 lines
943 B
YAML

id: globalprotect-panel
info:
name: Palo Alto Networks GlobalProtect Login Panel - Detect
author: organiccrap
severity: info
description: Palo Alto Networks GlobalProtect login panel was detected.
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0
cwe-id: CWE-200
metadata:
vendor: paloaltonetworks
product: globalprotect
max-request: 2
tags: panel,panos,globalprotect
http:
- method: GET
path:
- "{{BaseURL}}/global-protect/login.esp"
- "{{BaseURL}}/sslmgr"
stop-at-first-match: true
matchers:
- type: word
words:
- "<title>GlobalProtect Portal</TITLE>"
- "<msg>Invalid parameters</msg>"
condition: or
# digest: 4a0a004730450220697e4d5a83c3ad334b9ed0dde883676a9160836b251c68ae3a2fc45f2f0ba3c3022100eece08afb6b41a112f4d490a09bec12c885ed5006767ed35f6e0ad90005bce80:922c64590222798bb761d5b6d8e72950