id: hillstone-ssl-vpn-panel

info:
  name: Hillstone Networks SSL VPN - Login Panel
  author: rxerium
  severity: info
  description: |
    Hillstone Networks SSL VPN (SG-6000 series) is an enterprise network security
    gateway with SSL VPN capabilities. The web login portal is frequently exposed
    on standard HTTPS ports.
  reference:
    - https://www.hillstonenet.com/products/next-generation-firewalls/
  metadata:
    max-request: 1
    shodan-query: 'ssl.cert.subject.cn:"SG-6000" ssl.cert.subject.org:"Hillstone Networks"'
  tags: panel,hillstone,ssl-vpn,vpn,ics,network

http:
  - method: GET
    path:
      - "{{BaseURL}}"


    matchers-condition: and
    matchers:
      - type: word
        words:
          - "Hillstone Networks"
          - "hillstonenet.com"
          - "HILLSTONE NETWORKS"
        condition: or
        part: body

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100e743d89acc72b25d8a579d6bf1da55bda84bee19f602f6c0c7ea9a6439d150ad02210098c111cbe1e44497dbc911324f93524fb6502c77560ef1d56d8a7366b6e63b5c:922c64590222798bb761d5b6d8e72950