id: teccom-openmessaging-detect

info:
  name: TecConnect OpenMessaging Webservice Detection
  author: lunarcowboy
  severity: info
  description: |
    TecCom TecConnect OpenMessaging webservice was detected.
  metadata:
    verified: true
    shodan-query: html:"www.teccom-eu.net/wsdl"
  tags: tech,teccom,tecconnect,eol,wsdl,discovery

http:
  - method: GET
    path:
      - '{{BaseURL}}/openmessaging.asmx?wsdl'
      - '{{BaseURL}}/tecopenmessaging/openmessaging.asmx?wsdl'
      - '{{BaseURL}}/tomconnect/openmessaging.asmx?wsdl'
      - '{{BaseURL}}/tomconnect_apo/openmessaging.asmx?wsdl'
      - '{{BaseURL}}/tompreprod/openmessaging.asmx?wsdl'

    stop-at-first-match: true

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'ProcessRequestResponse'
          - 'ProcessRequestResult'
        condition: and

      - type: word
        part: content_type
        words:
          - 'text/xml'

      - type: status
        status:
          - 200
# digest: 490a00463044022021136d2cfb3217689309a780f628ba1e67502f8dda474e331608ac0dbc4babd6022016012a24d7a94ccb3cac9715926681196c2418e48f9833602404913fb0035cb0:922c64590222798bb761d5b6d8e72950