id: inductive-automation-ignition-panel

info:
  name: Inductive Automation Ignition - Gateway Panel
  author: rxerium
  severity: info
  description: |
    Inductive Automation Ignition is a widely-deployed industrial SCADA/HMI
    platform used in manufacturing, utilities, and process industries. The
    Ignition Gateway web interface provides access to project management,
    OPC-UA tag browsing, and system configuration. Exposed gateways may
    allow unauthenticated access to project lists and system information.
  reference:
    - https://inductiveautomation.com/ignition/
    - https://docs.inductiveautomation.com/docs/8.1/ignition-gateway-interface
  metadata:
    max-request: 1
    verified: true
    vendor: Inductive Automation
    product: ignition
    shodan-query: http.title:"Ignition Gateway"
  tags: panel,scada,hmi,ics,ignition,inductive-automation,opc-ua,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - '<title>Ignition Gateway</title>'
          - 'Inductive Automation'
          - '/res/perspective/client.js'
        condition: or

      - type: status
        status:
          - 200
# digest: 4a0a0047304502202c0b310b113023ac699ff4451d514d11cab3e8f959b914ad0de4f4a8f2090bbb022100c63e7b1f3afc6785a24bef30f488b2716daf026506803b230ae7047797b36968:922c64590222798bb761d5b6d8e72950