id: movable-type-login

info:
  name: Movable Type Pro Login Panel - Detect
  author: dhiyaneshDk
  severity: info
  description: Movable Type Pro login panel was detected.
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
    cpe: cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:*:*:*
  metadata:
    max-request: 2
    vendor: sixapart
    product: movable_type
    shodan-query:
      - title:"サインイン | Movable Type Pro"
      - cpe:"cpe:2.3:a:sixapart:movable_type"
      - http.title:"サインイン | movable type pro"
    fofa-query: title="サインイン | movable type pro"
    google-query: intitle:"サインイン | movable type pro"
  tags: panel,movable,sixapart,discovery

http:
  - method: GET
    path:
      - '{{BaseURL}}/mt/admin'
      - '{{BaseURL}}/mt.cgi'

    stop-at-first-match: true

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Movable Type Pro"

      - type: status
        status:
          - 200
# digest: 4a0a00473045022073552c365df9a5eb6bb7902878fd288d936fb74aeee7ef140ff918d6eb5a3ad1022100c59cfaffb12b590805c78a5a456a9ad3cd862a23f558394a0c19aa64cdd6655c:922c64590222798bb761d5b6d8e72950