id: opnsense-panel

info:
  name: OPNsense Panel - Detect
  author: Splint3r7,johnk3r
  severity: info
  description: |
    OPNsense panel was detected.
  classification:
    cwe-id: CWE-200
  metadata:
    max-request: 1
    verified: true
    vendor: opnsense
    product: opnsense
    shodan-query:
      - http.favicon.hash:-1148190371
      - http.favicon.hash:-1068289244
      - title:"| OPNsense"
      - "Server: OPNsense"
    fofa-query:
      - icon_hash="-1148190371"
      - icon_hash="-1068289244"
      - title="| OPNsense"
      - server=="OPNsense"
  tags: panel,login,detect,opnsense,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: dsl
        dsl:
          - 'contains(body, "| OPNsense</title>")'
          - 'status_code == 200'
        condition: and
# digest: 4a0a00473045022042b63572a3d538f22457af1be7d1b3e2afcf62577c89463ffc5e3e229572da17022100e14326b119cbad2f6383c4995475d0f2818ceee7a55490869cbccc579d3a9811:922c64590222798bb761d5b6d8e72950