id: langfuse-panel

info:
  name: Langfuse Panel - Detect
  author: ChrisJr404
  severity: info
  description: |
    Langfuse panel was detected. Langfuse is an open-source LLM engineering platform for observability, evaluations, prompt management and analytics. Exposed instances may reveal LLM prompts, traces, evaluations, and connected API keys.
  reference:
    - https://github.com/langfuse/langfuse
    - https://langfuse.com/
  metadata:
    verified: true
    max-request: 2
    vendor: langfuse
    product: langfuse
    shodan-query: http.title:"Langfuse"
    fofa-query: title="Langfuse"
  tags: panel,langfuse,llm,ai,detect,login

http:
  - method: GET
    path:
      - "{{BaseURL}}"
      - "{{BaseURL}}/api/public/health"

    host-redirects: true
    max-redirects: 2
    stop-at-first-match: true

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200 && contains(to_lower(body), "<title>langfuse")'
          - 'status_code == 200 && contains(to_lower(header), "x-langfuse-")'
          - 'status_code == 200 && contains_all(body, "\"status\":\"OK\"", "version") && contains(to_lower(content_type), "application/json") && contains(path, "/api/public/health")'
        condition: or
# digest: 4a0a00473045022100dc4a5eaba3385273c1f49425ea00c00e85a8cd2b3c4bf903a3017b2241d9fb54022049e9c63b38bd5deaf15a3f110629144f1b64aa54373e840e9a7a9f3a97f43bae:922c64590222798bb761d5b6d8e72950