id: redlion-hmi-panel

info:
  name: Red Lion HMI - Login Panel
  author: rxerium
  severity: info
  description: |
    Red Lion HMI web interface panel has been detected.
  reference:
    - https://www.redlion.net/
  metadata:
    max-request: 1
    verified: true
    vendor: Red Lion Controls
    product: hmi
    shodan-query: 'http.html:"Red Lion"'
  tags: panel,redlion,hmi,ics,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'Red Lion Controls'
          - 'www.redlion.net'
        condition: or

      - type: status
        status:
          - 200
# digest: 490a0046304402207e5e5468e5cc97731ca4bf8de8bc52dd0dff062771e5b29e6f7b1993d6cf742a02205c33d9ae860ca00a173d4d13bb5fe374f8c658545621409bc28884065babe713:922c64590222798bb761d5b6d8e72950