id: openhands-panel

info:
  name: OpenHands Panel - Detect
  author: rxerium
  severity: info
  description: |
    OpenHands (formerly OpenDevin) was detected. OpenHands is an open-source AI software engineering agent platform that can write code, run commands, and perform development tasks autonomously. Exposed instances may allow unauthenticated access to the agent.
  reference:
    - https://github.com/All-Hands-AI/OpenHands
    - https://www.all-hands.dev/
  metadata:
    verified: true
    max-request: 1
    vendor: All-Hands-AI
    product: openhands
    shodan-query: 'http.title:"OpenHands"'
  tags: panel,openhands,opendevin,agent,ai,detect,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "<title>OpenHands</title>"

      - type: status
        status:
          - 200
# digest: 4a0a0047304502202ad573b07f27d66b524e13a0ba37df36b450532fe6df7c2b0ccd805bdfe53101022100c06037ab5c0aac4bcb83603abef64bcea6e2e9b3ec39014f90fb695315626f97:922c64590222798bb761d5b6d8e72950