Operator
98103466d8
Sanitized version of red team infrastructure automation platform. Operational content (implant pipelines, lures, credential capture) replaced with documented stubs. Architecture and infrastructure automation code intact.
104 lines
2.6 KiB
YAML
104 lines
2.6 KiB
YAML
targets:
|
|
- name: "Palo Alto PAN-OS < 10.2.14"
|
|
tags: [panos, firewall, palo-alto, cve-2024-3400, network-device]
|
|
ports: [443, 4443, 8443]
|
|
probes:
|
|
- type: https
|
|
path: "/api/?type=version"
|
|
method: GET
|
|
match_in: body
|
|
patterns: ["sw-version"]
|
|
version_extract: "<sw-version>([0-9]+\\.[0-9]+\\.[0-9]+)"
|
|
version_compare:
|
|
operator: "<"
|
|
value: "10.2.14"
|
|
confidence: high
|
|
|
|
- type: https
|
|
path: "/php/login.php"
|
|
method: GET
|
|
match_in: [body, headers]
|
|
patterns:
|
|
- "Palo Alto Networks"
|
|
- "PAN-OS"
|
|
confidence: low
|
|
|
|
- type: https
|
|
path: "/global-protect/portal/gp-portal-esp.esp"
|
|
method: GET
|
|
match_in: body
|
|
patterns: ["globalprotect", "PAN-OS"]
|
|
confidence: low
|
|
|
|
- name: "Ubuntu 24.04 SSH"
|
|
tags: [linux, ubuntu, ssh]
|
|
ports: [22]
|
|
probes:
|
|
- type: tcp_banner
|
|
patterns:
|
|
- "Ubuntu-24"
|
|
- "OpenSSH.*Ubuntu"
|
|
version_extract: "SSH-2\\.0-OpenSSH_([0-9p.]+)"
|
|
confidence: high
|
|
|
|
- name: "D-Link DIR-823X fw 240126/240802"
|
|
tags: [router, d-link, cpe, iot]
|
|
ports: [80, 443, 8080]
|
|
probes:
|
|
- type: http
|
|
path: "/"
|
|
match_in: body
|
|
patterns: ["DIR-823X"]
|
|
confidence: medium
|
|
- type: http
|
|
path: "/"
|
|
match_in: body
|
|
all_patterns: ["DIR-823X"]
|
|
patterns: ["240126", "240802"]
|
|
confidence: high
|
|
|
|
- name: "Exposed IP Camera"
|
|
tags: [camera, iot, surveillance]
|
|
ports: [80, 554, 8080, 8443, 37777, 34567]
|
|
probes:
|
|
- type: http
|
|
path: "/"
|
|
match_in: [body, headers]
|
|
patterns:
|
|
- "(?i)hikvision"
|
|
- "(?i)dahua"
|
|
- "(?i)ip.?camera"
|
|
- "(?i)ipcam"
|
|
- "(?i)webcam"
|
|
- "(?i)reolink"
|
|
- "(?i)amcrest"
|
|
- "(?i)axis"
|
|
confidence: medium
|
|
- type: rtsp
|
|
patterns: ["RTSP/1.0 200"]
|
|
confidence: medium
|
|
|
|
- name: "Cisco SD-WAN vManage <= 20.17"
|
|
tags: [cisco, sdwan, network]
|
|
ports: [443, 8443]
|
|
probes:
|
|
- type: https
|
|
path: "/dataservice/client/server"
|
|
method: GET
|
|
match_in: body
|
|
patterns: ["platformVersion"]
|
|
version_extract: '"platformVersion":"([0-9.]+)"'
|
|
version_compare:
|
|
operator: "<="
|
|
value: "20.17"
|
|
confidence: high
|
|
|
|
- name: "Open Redis"
|
|
tags: [database, redis, exposed]
|
|
ports: [6379]
|
|
probes:
|
|
- type: tcp_banner
|
|
patterns: ["redis_version"]
|
|
version_extract: "redis_version:([0-9.]+)"
|
|
confidence: high
|