From 06f33856ace97dcac94fbe186ea5286717db5b06 Mon Sep 17 00:00:00 2001 From: dcruzec Date: Thu, 16 May 2024 14:03:14 -0400 Subject: [PATCH 1/5] Add files via upload submitting a pull request for vrealize hyperic login panel. --- .../vrealize-hyperic-login-panel.yaml | 30 +++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 http/exposed-panels/vrealize-hyperic-login-panel.yaml diff --git a/http/exposed-panels/vrealize-hyperic-login-panel.yaml b/http/exposed-panels/vrealize-hyperic-login-panel.yaml new file mode 100644 index 00000000000..eb56e21586a --- /dev/null +++ b/http/exposed-panels/vrealize-hyperic-login-panel.yaml @@ -0,0 +1,30 @@ +id: vrealize-hyperic-login-panel + +info: + name: vRealize Hyperic Login Panel - Detect + author: Charles D. + severity: info + description: vRealize Hyperic login panel was detected + classification: + cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cwe-id: CWE-200 + metadata: + max-request: 1 + shodan-query: http.title:"Sign In - Hyperic" + tags: login,panel,vrealize-hyperic + +http: + - method: GET + path: + - '{{BaseURL}}/app/login' + + matchers-condition: and + matchers: + - type: word + words: + - "Sign In - Hyperic" + part: body + + - type: status + status: + - 200 \ No newline at end of file From ac967a09938beb5b63190f499bec7d27d5a032ae Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Sat, 18 May 2024 04:49:51 +0530 Subject: [PATCH 2/5] minor update --- .../vrealize-hyperic-login-panel.yaml | 26 ++++++++++--------- 1 file changed, 14 insertions(+), 12 deletions(-) diff --git a/http/exposed-panels/vrealize-hyperic-login-panel.yaml b/http/exposed-panels/vrealize-hyperic-login-panel.yaml index eb56e21586a..d8fc286fe92 100644 --- a/http/exposed-panels/vrealize-hyperic-login-panel.yaml +++ b/http/exposed-panels/vrealize-hyperic-login-panel.yaml @@ -1,30 +1,32 @@ -id: vrealize-hyperic-login-panel +id: vrealize-hyperic-panel -info: +info: name: vRealize Hyperic Login Panel - Detect - author: Charles D. + author: Charles D severity: info - description: vRealize Hyperic login panel was detected - classification: + description: | + vRealize Hyperic login panel was detected + classification: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N cwe-id: CWE-200 metadata: max-request: 1 shodan-query: http.title:"Sign In - Hyperic" - tags: login,panel,vrealize-hyperic + verified: true + tags: login,panel,vrealize,hyperic http: - method: GET - path: + path: - '{{BaseURL}}/app/login' matchers-condition: and - matchers: + matchers: - type: word - words: - - "Sign In - Hyperic" part: body - + words: + - "Sign In - Hyperic" + - type: status status: - - 200 \ No newline at end of file + - 200 From 65486eb5cc10618cfcf77911d9b5881e03d40716 Mon Sep 17 00:00:00 2001 From: dcruzec Date: Mon, 20 May 2024 11:56:42 -0400 Subject: [PATCH 3/5] osnexus-quantastor-management-console --- ...osnexus-quantastor-management-console.yaml | 37 +++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 http/exposed-panels/osnexus-quantastor-management-console.yaml diff --git a/http/exposed-panels/osnexus-quantastor-management-console.yaml b/http/exposed-panels/osnexus-quantastor-management-console.yaml new file mode 100644 index 00000000000..b1246ca697b --- /dev/null +++ b/http/exposed-panels/osnexus-quantastor-management-console.yaml @@ -0,0 +1,37 @@ +id: osnexus-quantastor-management-console + +info: + name: OSNEXUS QuantaStor Management Console - Detect + author: Charles D + severity: info + description: OSNEXUS QuantaStor Management Console was detected + classification: + cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cwe-id: CWE-200 + metadata: + max-request: 1 + shodan-query: http.title:"OS NEXUS QuantaStor Manager" + tags: management-console,login,osnexus-quantastor,osnexus + +http: + - method: GET + path: + - '{{BaseURL}}' + + matchers-condition: and + matchers: + - type: word + words: + - "OS NEXUS QuantaStor Manager" + part: body + + - type: status + status: + - 200 + + extractors: + - type: regex + part: body + group: 1 + regex: + - "'name="qsversion" content="([^"]+)"'" From 6ba053e1aee16bc9926d7ba8e048d813b60d197b Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Fri, 24 May 2024 12:43:39 +0530 Subject: [PATCH 4/5] Delete http/exposed-panels/osnexus-quantastor-management-console.yaml --- ...osnexus-quantastor-management-console.yaml | 37 ------------------- 1 file changed, 37 deletions(-) delete mode 100644 http/exposed-panels/osnexus-quantastor-management-console.yaml diff --git a/http/exposed-panels/osnexus-quantastor-management-console.yaml b/http/exposed-panels/osnexus-quantastor-management-console.yaml deleted file mode 100644 index b1246ca697b..00000000000 --- a/http/exposed-panels/osnexus-quantastor-management-console.yaml +++ /dev/null @@ -1,37 +0,0 @@ -id: osnexus-quantastor-management-console - -info: - name: OSNEXUS QuantaStor Management Console - Detect - author: Charles D - severity: info - description: OSNEXUS QuantaStor Management Console was detected - classification: - cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N - cwe-id: CWE-200 - metadata: - max-request: 1 - shodan-query: http.title:"OS NEXUS QuantaStor Manager" - tags: management-console,login,osnexus-quantastor,osnexus - -http: - - method: GET - path: - - '{{BaseURL}}' - - matchers-condition: and - matchers: - - type: word - words: - - "OS NEXUS QuantaStor Manager" - part: body - - - type: status - status: - - 200 - - extractors: - - type: regex - part: body - group: 1 - regex: - - "'name="qsversion" content="([^"]+)"'" From 41fe0680d8cba4df76136eb2aaa6c939d926c41c Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Fri, 24 May 2024 12:48:07 +0530 Subject: [PATCH 5/5] Update vrealize-hyperic-login-panel.yaml --- http/exposed-panels/vrealize-hyperic-login-panel.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/http/exposed-panels/vrealize-hyperic-login-panel.yaml b/http/exposed-panels/vrealize-hyperic-login-panel.yaml index d8fc286fe92..0938e0eb52a 100644 --- a/http/exposed-panels/vrealize-hyperic-login-panel.yaml +++ b/http/exposed-panels/vrealize-hyperic-login-panel.yaml @@ -10,10 +10,10 @@ info: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N cwe-id: CWE-200 metadata: + verified: true max-request: 1 shodan-query: http.title:"Sign In - Hyperic" - verified: true - tags: login,panel,vrealize,hyperic + tags: login,panel,vrealize,hyperic,detect http: - method: GET