id: scadabr-panel

info:
  name: ScadaBR - Login Panel
  author: rxerium
  severity: info
  description: |
    ScadaBR is an open-source SCADA system based on Mango Automation, widely
    used in Brazil and Latin America for industrial monitoring. The "powered by
    Mango" tagline in the title is a unique identifier. Instances are often
    internet-facing without authentication controls.
  reference:
    - https://www.scadabr.com.br/
    - https://github.com/ScadaBR/ScadaBR
  metadata:
    max-request: 1
    verified: true
    vendor: ScadaBR
    product: scadabr
    shodan-query: http.title:"ScadaBR"
  tags: panel,scada,ics,scadabr,mango,open-source,latin-america,discovery

http:
  - method: GET
    path:
      - '{{BaseURL}}'

    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - '<title>ScadaBR</title>'
          - 'ScadaBR Software'
        condition: or

      - type: status
        status:
          - 200
# digest: 4a0a0047304502207dd4c6685487a6c12630a7a5734a223170e640cdbf85b9e66a0495b652e9e63c022100b3a3f3ee5588227cf14abb1c16fcbcccf800182c22dcc11fade4dc4e18977f54:922c64590222798bb761d5b6d8e72950