id: mitel-nupoint-panel

info:
  name: Mitel NuPoint Unified Messaging Panel - Detect
  author: s4e-io
  severity: info
  description: |
    Mitel NuPoint Unified Messaging login panel was detected.
  metadata:
    verified: true
    max-request: 1
    vendor: mitel
    product: micollab
    shodan-query:
      - http.html:"mitel networks"
      - http.favicon.hash:"-1922044295"
      - http.html:"micollab end user portal"
    fofa-query:
      - body="mitel networks"
      - '"micollab end user portal" && title=="redirecting..."'
      - body="micollab end user portal"
      - icon_hash="-1922044295"
  tags: panel,mitel,nupoint-unified-messaging,detect,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/npm-admin/showLoginPage.do"

    host-redirects: true
    matchers:
      - type: dsl
        dsl:
          - 'contains(body, "<title>NuPoint Unified Messaging - Login</title>")'
          - "status_code == 200"
        condition: and
# digest: 4b0a00483046022100f3003d45f81449394cb2b73f905968250a3d064732902241bba5e3e6259c84f8022100d7826ee8fd8a1c7e6a7baa807cc675e31006ba5372b6238675490b864e896e52:922c64590222798bb761d5b6d8e72950