id: misp-panel

info:
  name: MISP Threat Intelligence Sharing Platform Panel - Detect
  author: johnk3r,darses
  severity: info
  classification:
    cpe: cpe:2.3:a:misp:misp:*:*:*:*:*:*:*:*
  metadata:
    verified: "true"
    max-request: 1
    vendor: misp
    product: misp
    shodan-query:
      - http.title:"Users - MISP"
      - http.title:"users - misp"
      - http.title:"Errors - MISP"
      - http.title:"errors - misp"
      - http.favicon.hash:-137577333
    fofa-query:
      - title="users - misp"
      - title="errors - misp"
      - icon_hash="-137577333"
    google-query: intitle:"users - misp"
  tags: panel,misp,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/users/login"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "https://github.com/MISP/MISP"
          - "<title>Users - MISP</title>"
        condition: or

      - type: status
        status:
          - 200
          - 500
        condition: or
# digest: 4a0a004730450220336fca3ff0e46262293ccb050cef74a130fb526a24e767ec99d4b8c736d1797f022100f5b4d4180db990ec24814d3482f7127152a9a3f1dc985f56573e78b266e662d7:922c64590222798bb761d5b6d8e72950