nuclei-templates/http/exposed-panels/casaos-panel.yaml

41 lines
1.0 KiB
YAML

id: casaos-panel
info:
name: CasaOS Login Panel - Detect
author: DhiyaneshDK
severity: info
description: CasaOS login panel was detected.
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
cpe: cpe:2.3:o:icewhale:casaos:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 2
shodan-query: html:"CasaOS"
product: casaos
vendor: icewhale
tags: panel,casaos,login,detect
http:
- method: GET
path:
- '{{BaseURL}}'
- '{{BaseURL}}/#/login'
stop-at-first-match: true
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- "/CasaOS-UI/"
- "We're sorry but CasaOS"
condition: or
- type: status
status:
- 200
# digest: 4b0a00483046022100c0ea76b799702e62cfd7f171847c96e0c243bf8c821b6a93c7237d154bf0d211022100c6c63d8388b6832d1276529ae7ed8ae0d60702aea1b0ee2c97335435fc1d5e7c:922c64590222798bb761d5b6d8e72950