id: caobox-cms-detect

info:
  name: Caobox CMS - Detect
  author: Chirag Mistry
  severity: info
  description: |
    Detects instances of Caobox CMS based on unique fingerprints and identifiers.
  metadata:
    verified: true
    shodan-query:
      - http.component:"Caobox"
      - http.component:"caobox"
      - cpe:"cpe:2.3:a:caobox:caobox"
  tags: detect,caobox,cms,tech

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    payloads:
      paths:
        - "/"
        - "/admin/"
        - "/index.php"
        - "/admin/login.php"

    matchers-condition: or
    matchers:
      - type: word
        words:
          - "Caobox CMS"
          - "powered by Caobox"
          - "Welcome to Caobox"
          - "Caobox version"
        condition: or

      - type: regex
        regex:
          - "(?i)caobox"
          - "(?i)caobox\\s+(v[0-9.]+)"
          - "(?i)<title>Caobox CMS"
# digest: 4a0a00473045022100c719d7f3701f636e0d5a12bea9989d7a7e3a03e629e2a104af3361c1bc5f6dde022018c013628d78f71ae5dbe81886ad954fa725aa95bad6e0f60e7578a713d88b11:922c64590222798bb761d5b6d8e72950