nuclei-templates/technologies/osquery-fleet-detect.yaml

30 lines
535 B
YAML

id: osquery-fleet-detect
info:
name: OSQuery Fleet Detection
author: Adam Crosser
severity: info
reference: https://fleetdm.com/
metadata:
shodan-query: http.favicon.hash:-1529860313
tags: panel,fleet,osquery
requests:
- method: GET
path:
- '{{BaseURL}}/login'
matchers-condition: and
matchers:
- type: word
part: body
words:
- "Fleet"
- "osquery"
- "/assets/bundle"
condition: and
- type: status
status:
- 200