id: nextcloudpi-panel

info:
  name: NextcloudPi Login - Panel
  author: ritikchaddha
  severity: info
  description: |
    Detects the presence of a NextcloudPi login page. NextcloudPi is a ready-to-use Nextcloud instance for Raspberry Pi.
  reference:
    - https://github.com/nextcloud/nextcloudpi
  metadata:
    verified: true
    max-request: 1
    vendor: nextcloud
    product: nextcloudpi
    shodan-query: title:"NextcloudPi"
    fofa-query: title="NextcloudPi"
  tags: nextcloud,nextcloudpi,login,panel,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/index.php/login"

    matchers:
      - type: dsl
        dsl:
          - "contains_any(body, 'NextcloudPi', 'https://nextcloudpi.com')"
          - "status_code==200"
        condition: and
# digest: 490a004630440220391bf903fe9773c335a5038ab149d7ec1c9f46fc00cb7b1d51398a88a437080902205c904a5117e0411f28cdea8c3b2c8865fc12fb19352488e48366af794bc6ff62:922c64590222798bb761d5b6d8e72950