id: openwebui-panel

info:
  name: Openweb UI Panel - Detect
  author: rxerium,righettod
  severity: info
  description: |
    OpenWebUI was detected - a platform for running AI on your own terms
  reference:
    - https://openwebui.com/
  metadata:
    verified: true
    max-request: 1
    shodan-query: http.favicon.hash:-286484075 http.title:"Open WebUI"
  tags: panel,openwebui,login,detect,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"
      - "{{BaseURL}}/api/config"
      - "{{BaseURL}}/auth"
      - "{{BaseURL}}/opensearch.xml"

    host-redirects: true
    max-redirects: 2

    stop-at-first-match: true
    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains_any(to_lower(body), "<title>open webui</title>", "\"name\":\"open webui\"", "<shortname>open webui</shortname>")'
        condition: and

    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - '"version"\s*:\s*"([0-9\.]+)"'
# digest: 4a0a004730450220328f59d9746dd330aeb3f7b182f6588bf1394e14db521c6b14373b2714d55610022100a25382a8397b9ca9f189c89ce4d0d979fc06726d9cf76b12251ae672fc139b04:922c64590222798bb761d5b6d8e72950