id: arcane-login-panel

info:
  name: Arcane Login Panel - Detect
  author: Kazgangap
  severity: info
  description: |
    Detects the presence of the Arcane login panel, a modern Docker management platform.
  metadata:
    max-request: 1
    verified: true
    fofa-query: icon_hash=="-313371739"
    shodan-query: http.favicon.hash:-313371739
  tags: arcane,login-panel,docker

http:
  - method: GET
    path:
      - "{{BaseURL}}/auth/login"

    matchers:
      - type: dsl
        dsl:
          - 'contains_any(tolower(body), "/arcane.png", "Sign in to Arcane", "alt=\"Arcane")'
          - 'status_code == 200'
        condition: and
# digest: 4a0a00473045022030e647699573cc46dcf401391614304191e6dbc73c38e3139903800c45647e680221009a6ab020eaa9f7fcd192a9addd527472178fcdaea811b5f4f50d4c95dcdf7442:922c64590222798bb761d5b6d8e72950