nuclei-templates/http/exposed-panels/arcserve-panel.yaml

34 lines
699 B
YAML

id: arcserve-panel
info:
name: ArcServe Panel - Detect
author: DhiyaneshDk
severity: info
reference:
- https://twitter.com/HunterMapping/status/1674267368359444480
- https://github.com/mdsecactivebreach/CVE-2023-26258-ArcServe
metadata:
max-request: 1
verified: true
shodan-query: http.favicon.hash:-1889244460
fofa-query: icon_hash="-1889244460"
tags: panel,login,arcserve,detect
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "Arcserve UDP"
- "/arcserve.js"
condition: or
- type: status
status:
- 200