nuclei-templates/http/exposed-panels/woodwing-panel.yaml

36 lines
1011 B
YAML

id: woodwing-panel
info:
name: Woodwing Studio Server Panel - Detect
author: pdteam,righettod
severity: info
reference:
- https://twitter.com/ynsmroztas/status/1680961398011047936
metadata:
verified: true
max-request: 2
shodan-query: http.title:"WoodWing Studio Server"
fofa-query: title=="WoodWing Studio Server"
tags: woodwing,panel
http:
- method: GET
path:
- "{{BaseURL}}/StudioServer/server/apps/login.php"
- "{{BaseURL}}/server/apps/login.php"
stop-at-first-match: true
redirects: true
max-redirects: 2
matchers:
- type: dsl
dsl:
- "contains(tolower(body), 'woodwing studio server')"
extractors:
- type: regex
part: body
group: 1
regex:
- '<!---->v([0-9.]+\s+Build\s+[0-9]+)'
# digest: 490a00463044022001a1c753049c41a5a0bcc80814014afa41fe28d5baa2b4a3f631f0d1152b46ee022074d12ded239fcb6dd5b5738c61de27286e5b4a705c65ef0bb69fdb4e45da4554:922c64590222798bb761d5b6d8e72950