id: codesys-webvisu-panel

info:
  name: CODESYS WebVisu - Panel
  author: rxerium
  severity: info
  description: |
    CODESYS WebVisu is the web-based HMI (Human-Machine Interface) component of the
    CODESYS industrial automation runtime. It provides browser-based access to PLC
    visualizations and industrial control interfaces. Exposed instances may reveal
    real-time process data and control functions without authentication.
  reference:
    - https://www.codesys.com/products/codesys-runtime/web-visualization.html
  metadata:
    max-request: 1
    verified: true
    vendor: CODESYS
    product: webvisu
    shodan-query: 'html:"WEBVISU LOGIN"'
  tags: panel,ics,scada,codesys,webvisu,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'WebVisu Authentication'
          - 'WEBVISU LOGIN'
          - '4Tredir'
        condition: or

      - type: status
        status:
          - 200
# digest: 490a004630440220308656ed559977db2dd77e1d32bcafd53a0ed7acd64f6c674cac517365cbad3f022019f3243d8413582eb1f622f6a9431a3a82e3cfc0f56ac758d7ab78e2c7bab8d6:922c64590222798bb761d5b6d8e72950