id: wingftp-panel

info:
  name: Wing FTP Server Login Panel - Detect
  author: pdteam
  severity: info
  description: |
    Detects the presence of Wing FTP Server web interface
  reference:
    - https://www.wftpserver.com/
  metadata:
    product: wingftp
    vendor: wingftp
    shodan-query:
      - http.html_hash:2121146066
      - http.favicon.hash:963565804
      - title:"Wing FTP Server"
      - "Server: Wing FTP Server"
    fofa-query:
      - icon_hash="963565804"
      - title="Wing FTP Server"
      - "Server: Wing FTP Server"
    zoomeye-query:
      - app="Wing FTP Server"
    verified: true
  tags: panel,login,wingftp,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/login.html"

    matchers:
      - type: word
        part: response
        words:
          - "Wing FTP Server"

    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - 'Wing FTP Server\s+v?([0-9]+\.[0-9]+\.[0-9]+)'
# digest: 4a0a0047304502201c9288b31824d0792f1aaa1a7867df5bcfbf0bcf8d1915448c5b91e9a9c69455022100ed3af5ba95756c8f7a163aea6c124cd22ab009db1d161d86ca390ac67f8fee7c:922c64590222798bb761d5b6d8e72950