id: hivemanager-login-panel

info:
  name: HiveManager Login Panel - Detect
  author: binaryfigments,daffainfo
  severity: info
  description: HiveManager login panel was detected.
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
  metadata:
    max-request: 1
    shodan-query: http.favicon.hash:1604363273
    verified: true
  tags: panel,hivemanager,aerohive

http:
  - method: GET
    path:
      - '{{BaseURL}}/hm/login.action'

    matchers-condition: or
    matchers:
      - type: word
        part: header
        words:
          - "HiveManager"

      - type: word
        part: body
        words:
          - "HiveManager"
          - 'alt="Aerohive'
        condition: and
# digest: 4a0a00473045022063588e89d69c10dc598e72e86373182ce5615605ac63721d8124a7a167e171d102210080603ee61ee5b4e7f008397d8e29bdd36d0f894b780ad1529f28e97fc5ce5911:922c64590222798bb761d5b6d8e72950