id: ivanti-sentry-panel

info:
  name: Ivanti Sentry Panel - Detect
  author: DhiyaneshDk
  severity: info
  description: |
    Ivanti Sentry panel was detected.
  metadata:
    verified: true
    max-request: 1
    product: sentry
    shodan-query: http.favicon.hash:967636089
  tags: panel,ivanti,discovery,login,sentry

http:
  - method: GET
    path:
      - "{{BaseURL}}/mics/login.jsp"

    host-redirects: true
    max-redirects: 2

    matchers:
      - type: word
        words:
          - "Ivanti System Manager"
          - "sentry"
        condition: and

    extractors:
      - type: regex
        group: 1
        regex:
          - \?([\d.]+)"
# digest: 4b0a00483046022100dd758a1ef696265f706cf0ed6026e6f3482e1ca3058a1505b1adf34f6d6d8f93022100f687e88519812e2d1f602c952b5604cf7e955f3088e5ced647a64751d56e2f0c:922c64590222798bb761d5b6d8e72950