id: sitefinity-login

info:
  name: Sitefinity Login
  author: dhiyaneshDK
  severity: info
  description: This template identifies the Sitefinity login page.
  reference:
    - https://www.exploit-db.com/ghdb/6722
  classification:
    cpe: cpe:2.3:a:progress:sitefinity_cms:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: progress
    product: sitefinity_cms
  tags: sitefinity,edb,panel,progress,discovery

http:
  - method: GET
    path:
      - '{{BaseURL}}/Sitefinity/Authenticate/SWT'

    matchers-condition: and
    matchers:
      - type: word
        words:
          - 'Telerik.Sitefinity.Web.UI.UserPreferences'

      - type: status
        status:
          - 200
# digest: 490a0046304402202a14c1a35b3dec57a6d5962d20ce4a3a84fa91bcb4d605daee95bc7fdb515cf80220417c8ed23cd766243ac498d26d196c7d7396f8fd0aa94da1b3d336f183a93ab3:922c64590222798bb761d5b6d8e72950