id: stormshield-network-security-panel

info:
  name: Stormshield Network Security - Login Panel
  author: rxerium
  severity: info
  description: |
    Stormshield Network Security (SNS) is a French network security appliance providing
    firewall, IPS, VPN, and web filtering capabilities. Its web management portal is
    frequently exposed on non-standard ports.
  reference:
    - https://www.stormshield.com/products/network-security/
  metadata:
    max-request: 3
    shodan-query: http.title:"Stormshield Network Security - Portal"
  tags: panel,stormshield,vpn,firewall,network-security,detect

http:
  - method: GET
    path:
      - "{{BaseURL}}"
      - "{{BaseURL}}/admin"
      - "{{BaseURL}}/admin/admin.html"

    redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'Stormshield Network Security - Portal'

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100c3bc9c98341d61e8ef038e5dce056e2d84e6cef28bfaeeb5d34851e73db671ba022100a5bef4cf43295c6037492727fac6f328f803bdfe91afca2f0e985ede0ab3524c:922c64590222798bb761d5b6d8e72950