id: gocontrol-event-admin-panel

info:
  name: Go.Control Event Administration Panel - Detect
  author: Mys7ic
  severity: info
  description: |
    Detects the presence of the Go.Control Event Administration login panel.
  reference:
    - https://www.go-control.de/
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
  metadata:
    verified: true
    max-request: 1
    vendor: go-control
    product: gocontrol
    fofa-query: title="Go.Control"
    zoomeye-query: title="Go.Control"
  tags: panel,gocontrol,login,detect,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/admin/"
      - "{{BaseURL}}/admin/index.php"

    stop-at-first-match: true
    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - '<title>Event Administration | Superuser Login'

      - type: status
        status:
          - 200
# digest: 4a0a004730450221008dc9a60a939fdf23aef21828db7c2357d42bbc82f58c3c6103e2c6c5d05efa6b0220601ee20b6043053baaf327102dca055d7f997a861d2496e231d8edc6edef33de:922c64590222798bb761d5b6d8e72950