id: manageengine-exchangereporter

info:
  name: ZOHO ManageEngine Exchange Reporter Plus Panel - Detect
  author: darses
  severity: info
  description: |
    ZOHO ManageEngine Exchange Reporter Plus panel was detected.
  reference:
    - https://www.manageengine.com/products/exchange-reports/
  classification:
    cpe: cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: zohocorp
    product: manageengine_exchange_reporter_plus
    shodan-query:
      - title:"ManageEngine - Exchange Reporter Plus"
      - http.favicon.hash:230963457
    fofa-query:
      - title="ManageEngine - Exchange Reporter Plus"
      - icon_hash="230963457"
  tags: panel,zoho,manageengine,zohocorp,login,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/exchange/index.html"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Exchange Reporter Plus"

      - type: status
        status:
          - 200

    extractors:
      - type: regex
        part: body
        group: 1
        name: version
        regex:
          - src="js/div-util.js\?v=(\d+)"
# digest: 4a0a00473045022100c58d408ef6b6f61a6846d33af5b10c5e3372b3edbfda6b4f13d900768b5b1751022048a929c85066b807940e1fe88ee85e3d2c34fd453d1ad205e83d06dbfa118dc3:922c64590222798bb761d5b6d8e72950