id: hivemanager-login-panel

info:
  name: HiveManager Login Panel - Detect
  author: binaryfigments,daffainfo
  severity: info
  description: HiveManager login panel was detected.
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
    cpe: cpe:2.3:a:aerohive:hivemanager_classic:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    shodan-query: http.favicon.hash:1604363273
    product: hivemanager_classic
    vendor: aerohive
  tags: panel,hivemanager,aerohive

http:
  - method: GET
    path:
      - '{{BaseURL}}/hm/login.action'

    matchers-condition: or
    matchers:
      - type: word
        part: header
        words:
          - "HiveManager"

      - type: word
        part: body
        words:
          - "HiveManager"
          - 'alt="Aerohive'
        condition: and
# digest: 4a0a004730450220748beafea6a83d7ae451563b918e59c1bf61f540b1718af61b38de768ddd9ef2022100c8b24fab405e76a2fbea4c8a143f717dcf83372c99404888b541629753b9421e:922c64590222798bb761d5b6d8e72950