id: misp-panel

info:
  name: MISP Threat Intelligence Sharing Platform Panel - Detect
  author: johnk3r,darses
  severity: info
  classification:
    cpe: cpe:2.3:a:misp:misp:*:*:*:*:*:*:*:*
  metadata:
    verified: "true"
    max-request: 1
    vendor: misp
    product: misp
    shodan-query:
      - http.title:"Users - MISP"
      - http.title:"users - misp"
      - http.title:"Errors - MISP"
      - http.title:"errors - misp"
      - http.favicon.hash:-137577333
    fofa-query:
      - title="users - misp"
      - title="errors - misp"
      - icon_hash="-137577333"
    google-query: intitle:"users - misp"
  tags: panel,misp

http:
  - method: GET
    path:
      - "{{BaseURL}}/users/login"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "https://github.com/MISP/MISP"
          - "<title>Users - MISP</title>"
        condition: or

      - type: status
        status:
          - 200
          - 500
        condition: or
# digest: 4a0a00473045022100ad6b31528c543c8d2b34fc5928a1f0ebd8e8dd28e96944a2b0896d3b891209ec0220437f873447fce2d112619735182b69d9586b268fa3608b98db6e75b782d77cdb:922c64590222798bb761d5b6d8e72950