id: vikunja-panel

info:
  name: Vikunja Login Panel - Detect
  author: matheusalbarello
  severity: info
  description: |
    Vikunja login panel was detected. Vikunja is a self-hosted to-do and project management application.
  reference:
    - https://vikunja.io
    - https://github.com/go-vikunja/vikunja
  metadata:
    verified: true
    max-request: 1
    vendor: vikunja
    product: vikunja
    shodan-query: http.title:"vikunja"
    fofa-query: title="Vikunja"
  tags: panel,vikunja,login,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers-condition: and
    matchers:
      - type: word
        part: header
        words:
          - "Server: Vikunja"

      - type: word
        part: body
        words:
          - "<title>Vikunja</title>"
          - "The to-do app to organize your life"
        condition: and

      - type: status
        status:
          - 200
# digest: 490a0046304402206cf25828b7eacf0d45387ab8a77bcad530091b1906f2d4659f46e4d43118e82c02204fbe36e2177c1a7ddda2e3ef30b1791fd66638da0cf744f4c475222c3d9720f3:922c64590222798bb761d5b6d8e72950