id: ibm-webmethods-panel

info:
  name: IBM webMethods Integration Login Panel - Detect
  author: infosec.asish
  severity: info
  description: |
    Identified an exposed IBM or Software AG webMethods login panel
  reference:
    - https://www.ibm.com/products/webmethods-hybrid-integration
  metadata:
    verified: true
    max-request: 1
    shodan-query: http.html:"IBM webMethods Integration"
  tags: tech,panel,ibm,webmethods,recon

http:
  - method: GET
    path:
      - "{{BaseURL}}"
      - "{{BaseURL}}/wmroot/"
      - "{{BaseURL}}/integration/"

    redirects: true
    max-redirects: 5
    stop-at-first-match: true

    matchers:
      - type: dsl
        dsl:
          - "status_code == 200"
          - "contains(body, '<title>IBM webMethods Integration')"
        condition: and
# digest: 4b0a00483046022100e732e3c2e1a337cab5fb08dbc08b0e35f7d3cca6d819a0ac29f5665dd65d63c2022100c560fb68f92acfd9126b27bd6d6ae566570fc63676f35173b8562e6c5aec3233:922c64590222798bb761d5b6d8e72950