id: hivemanager-login-panel

info:
  name: HiveManager Login Panel - Detect
  author: binaryfigments,daffainfo
  severity: info
  description: HiveManager login panel was detected.
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
    cpe: cpe:2.3:a:aerohive:hivemanager_classic:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    shodan-query: http.favicon.hash:1604363273
    product: hivemanager_classic
    vendor: aerohive
  tags: panel,hivemanager,aerohive,discovery

http:
  - method: GET
    path:
      - '{{BaseURL}}/hm/login.action'

    matchers-condition: or
    matchers:
      - type: word
        part: header
        words:
          - "HiveManager"

      - type: word
        part: body
        words:
          - "HiveManager"
          - 'alt="Aerohive'
        condition: and
# digest: 4a0a00473045022032e7f9c476990d0f0a17d31d7f2558c1cedb83289738f9cfd6c96bc8f78309cd02210087726e15b191db6476828d8e5275cd8bc72e72b5c1da4853a8ca503e23267cb2:922c64590222798bb761d5b6d8e72950