id: wingftp-panel

info:
  name: Wing FTP Server Login Panel - Detect
  author: pdteam
  severity: info
  description: |
    Detects the presence of Wing FTP Server web interface
  reference:
    - https://www.wftpserver.com/
  metadata:
    product: wingftp
    vendor: wingftp
    shodan-query:
      - http.html_hash:2121146066
      - http.favicon.hash:963565804
      - title:"Wing FTP Server"
      - "Server: Wing FTP Server"
    fofa-query:
      - icon_hash="963565804"
      - title="Wing FTP Server"
      - "Server: Wing FTP Server"
    zoomeye-query:
      - app="Wing FTP Server"
    verified: true
  tags: panel,login,wingftp

http:
  - method: GET
    path:
      - "{{BaseURL}}/login.html"

    matchers:
      - type: word
        part: response
        words:
          - "Wing FTP Server"

    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - 'Wing FTP Server\s+v?([0-9]+\.[0-9]+\.[0-9]+)'
# digest: 490a00463044022046e96018829df1d7a8b6bb8273203b54db566aca6dcc4df484cfb97718edc2a10220596b82cd028e73a588cc728bf06413593f75651624d60c6adf354a9e2ecf4fbe:922c64590222798bb761d5b6d8e72950