Files
nuclei-templates/http/exposed-panels/cockpit-project-panel.yaml
2025-10-22 12:54:13 +00:00

50 lines
1.3 KiB
YAML

id: cockpit-project-panel
info:
name: Cockpit Project Login Panel - Detect
author: righettod
severity: info
description: |
Cockpit Project products was detected.
reference:
- https://github.com/cockpit-project/cockpit
- https://cockpit-project.org/
metadata:
max-request: 1
verified: true
shodan-query: http.html:"cockpit/static/login.css"
tags: panel,cockpit,login
http:
- method: GET
path:
- "{{BaseURL}}/"
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains_all(to_lower(body), "cockpit/", "is_cockpit_client")'
condition: and
extractors:
- type: regex
part: body
name: os
group: 1
regex:
- '(?i)"PRETTY_NAME"\s*:\s*"(.*?)"'
internal: true
- type: regex
part: body
name: hostname
group: 1
regex:
- '(?i)"hostname"\s*:\s*"(.*?)"'
internal: true
- type: dsl
dsl:
- '"OS: " + os + " | Hostname: " + hostname'
# digest: 4b0a00483046022100d12f4aaf0214de03b7199aa9db35c38b0fb19aeeec0a3e5413db797a849fda30022100e7b74d4a5c2a8a0e8e28e4e4edddb3a87d4b9b9dc70019dcb5ac5165dabca6dd:922c64590222798bb761d5b6d8e72950