nuclei-templates/http/exposed-panels/globalprotect-panel.yaml

33 lines
947 B
YAML

id: globalprotect-panel
info:
name: Palo Alto Networks GlobalProtect Login Panel - Detect
author: organiccrap
severity: info
description: Palo Alto Networks GlobalProtect login panel was detected.
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0
cwe-id: CWE-200
metadata:
vendor: paloaltonetworks
product: globalprotect
max-request: 2
tags: panel,panos,globalprotect
http:
- method: GET
path:
- "{{BaseURL}}/global-protect/login.esp"
- "{{BaseURL}}/sslmgr"
stop-at-first-match: true
matchers:
- type: word
words:
- "<title>GlobalProtect Portal</TITLE>"
- "<msg>Invalid parameters</msg>"
condition: or
# digest: 4b0a00483046022100c80668bcd77ead45321df0ba22d698e8adef9dfb4e65e0f7e50482c53202a6fc022100dacda879e28acb654b089c37dd59c9257cde3d016af3b4c1eeaa659788b1c4b2:922c64590222798bb761d5b6d8e72950