diff --git a/http/exposed-panels/panos-management-panel.yaml b/http/exposed-panels/panos-management-panel.yaml new file mode 100644 index 00000000000..e431ee1ec52 --- /dev/null +++ b/http/exposed-panels/panos-management-panel.yaml @@ -0,0 +1,36 @@ +id: panos-management-panel + +info: + name: PAN-OS Management Panel - Detect + author: bhutch + severity: info + description: | + PAN-OS management panel was detected. + reference: + - https://security.paloaltonetworks.com/PAN-SA-2024-0015 + classification: + cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cwe-id: CWE-200 + metadata: + verified: true + max-request: 1 + shodan-query: http.favicon.hash:873381299 + tags: panel,panos,login,detect,paloaltonetworks + +http: + - method: GET + path: + - "{{BaseURL}}/php/login.php" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "Login" + - 'PAN_FORM_CONTENT' + condition: and + + - type: status + status: + - 200