id: onlyoffice-login-panel

info:
  name: ONLYOFFICE Login Panel - Detect
  author: eremit4
  severity: info
  description: |
    ONLYOFFICE Community Server is a free open-source collaborative system developed to manage documents, projects, customer relationship and email correspondence.
  classification:
    cpe: cpe:2.3:a:onlyoffice:onlyoffice:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 2
    vendor: onlyoffice
    product: onlyoffice
    fofa-query:
      - app="ONLYOFFICE" && (icon_hash="1928933157" || icon_hash="826083956" || icon_hash="-1380930248" || icon_hash="-285544629" || icon_hash="812741391")
      - app="onlyoffice" && (icon_hash="1928933157" || icon_hash="826083956" || icon_hash="-1380930248" || icon_hash="-285544629" || icon_hash="812741391")
  tags: panel,onlyoffice,detect,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"
      - "{{BaseURL}}/auth.aspx"

    stop-at-first-match: true
    host-redirects: true
    max-redirects: 2
    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'ONLYOFFICE'
          - 'title="ONLYOFFICE'
          - 'content="ONLYOFFICE'
          - '/images/onlyoffice_logo/'
          - 'alt="ONLYOFFICE'
        condition: or

      - type: status
        status:
          - 200
# digest: 4a0a004730450220524005e30f1a5eebb6d439569b3072b234e08f6a95c9b4d9e013f3d288deae0602210099fb0e47a49d9b0c5b43b9edd03f36dc55c9df5ea0675f60331957050458e4f7:922c64590222798bb761d5b6d8e72950