id: microsys-promotic-panel

info:
  name: Microsys Promotic SCADA - Login Panel
  author: rxerium
  severity: info
  description: |
    Microsys Promotic is a SCADA/HMI software platform widely deployed in central European
    industrial and building automation applications. The embedded web server exposes a
    runtime panel accessible over HTTP on non-standard ports.
  reference:
    - https://www.microsys.cz/en/products/promotic/
  metadata:
    max-request: 1
    verified: true
    vendor: MicroSys
    product: promotic
    shodan-query: 'http.title:"PROMOTIC"'
  tags: panel,microsys,promotic,scada,ics,ot,discovery

http:
  - method: GET
    path:
      - '{{BaseURL}}'

    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - '<title>PROMOTIC Redirection</title>'

      - type: word
        part: header
        words:
          - 'Server: Promotic'

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100d0b58f022006897bfb87f27ebff739250c5adca8a01204fcc4db0b839aee22e1022100c18f3a9a728a2309f3ec0f0899919c733e5da25dcacb40262141fe244fc6f90f:922c64590222798bb761d5b6d8e72950