id: osisoft-pi-vision-panel

info:
  name: OSIsoft PI Vision - Login Panel
  author: rxerium
  severity: info
  description: |
    OSIsoft PI Vision (now AVEVA PI Vision) is a web-based data visualisation
    platform for the PI System, widely used in energy, utilities, oil and gas,
    and manufacturing for real-time operational data monitoring. Exposed instances
    may provide access to sensitive operational technology data.
  reference:
    - https://www.aveva.com/en/products/pi-vision/
    - https://docs.aveva.com/bundle/pi-vision/
  metadata:
    max-request: 2
    verified: true
    vendor: OSIsoft
    product: pi-vision
    shodan-query: 'http.title:"PI Vision"'
  tags: panel,scada,historian,ics,osisoft,aveva,pi-vision,pi-system,energy,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    host-redirects: true
    max-redirects: 2

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains(body, "<title>PI Vision</title>")'
          - 'contains_any(body, "PI Vision User Guide", "PI Vision display", "project=PIVISION")'
        condition: and
# digest: 4a0a0047304502201da4409e6a884332fcd0227b1756b00803b4bf4de888e5e9709f0c59cfadc2d3022100d0660252df24f62ac90138309b825610824e2c7eafbaa625bd65ed9e298b151d:922c64590222798bb761d5b6d8e72950