nuclei-templates/http/exposed-panels/sonicwall-sslvpn-panel.yaml

34 lines
1001 B
YAML

id: sonicwall-sslvpn-panel
info:
name: SonicWall Virtual Office SSL VPN Login Panel - Detect
author: PR3R00T,johnk3r
severity: info
description: SonicWall Virtual Office SSL VPN login panel was detected.
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
cpe: cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: sonicwall
product: sonicos
google-query: inurl:"auth.html" intitle:"sonicwall"
tags: panel,sonicwall
http:
- method: GET
path:
- "{{BaseURL}}/cgi-bin/welcome"
matchers-condition: or
matchers:
- type: word
words:
- "<title>Virtual Office</title>"
- type: word
part: header
words:
- "SonicWALL SSLVPN Web Server"
# digest: 490a004630440220565dfb3205a98cc9cc35d9d681d7bf832cd05ae271e91e56ef82295a3fa14c9a02203dc90b5210332206ff8e37fc746f7f3651817e1ac2e325e29e92619a67faccbc:922c64590222798bb761d5b6d8e72950