n0mad1k
104 lines
2.6 KiB
YAML
104 lines
2.6 KiB
YAML
targets:
|
|
- name: "Palo Alto PAN-OS < 10.2.14"
|
|
tags: [panos, firewall, palo-alto, cve-2024-3400, network-device]
|
|
ports: [443, 4443, 8443]
|
|
probes:
|
|
- type: https
|
|
path: "/api/?type=version"
|
|
method: GET
|
|
match_in: body
|
|
patterns: ["sw-version"]
|
|
version_extract: "<sw-version>([0-9]+\\.[0-9]+\\.[0-9]+)"
|
|
version_compare:
|
|
operator: "<"
|
|
value: "10.2.14"
|
|
confidence: high
|
|
|
|
- type: https
|
|
path: "/php/login.php"
|
|
method: GET
|
|
match_in: [body, headers]
|
|
patterns:
|
|
- "Palo Alto Networks"
|
|
- "PAN-OS"
|
|
confidence: low
|
|
|
|
- type: https
|
|
path: "/global-protect/portal/gp-portal-esp.esp"
|
|
method: GET
|
|
match_in: body
|
|
patterns: ["globalprotect", "PAN-OS"]
|
|
confidence: low
|
|
|
|
- name: "Ubuntu 24.04 SSH"
|
|
tags: [linux, ubuntu, ssh]
|
|
ports: [22]
|
|
probes:
|
|
- type: tcp_banner
|
|
patterns:
|
|
- "Ubuntu-24"
|
|
- "OpenSSH.*Ubuntu"
|
|
version_extract: "SSH-2\\.0-OpenSSH_([0-9p.]+)"
|
|
confidence: high
|
|
|
|
- name: "D-Link DIR-823X fw 240126/240802"
|
|
tags: [router, d-link, cpe, iot]
|
|
ports: [80, 443, 8080]
|
|
probes:
|
|
- type: http
|
|
path: "/"
|
|
match_in: body
|
|
patterns: ["DIR-823X"]
|
|
confidence: medium
|
|
- type: http
|
|
path: "/"
|
|
match_in: body
|
|
all_patterns: ["DIR-823X"]
|
|
patterns: ["240126", "240802"]
|
|
confidence: high
|
|
|
|
- name: "Exposed IP Camera"
|
|
tags: [camera, iot, surveillance]
|
|
ports: [80, 554, 8080, 8443, 37777, 34567]
|
|
probes:
|
|
- type: http
|
|
path: "/"
|
|
match_in: [body, headers]
|
|
patterns:
|
|
- "(?i)hikvision"
|
|
- "(?i)dahua"
|
|
- "(?i)ip.?camera"
|
|
- "(?i)ipcam"
|
|
- "(?i)webcam"
|
|
- "(?i)reolink"
|
|
- "(?i)amcrest"
|
|
- "(?i)axis"
|
|
confidence: medium
|
|
- type: rtsp
|
|
patterns: ["RTSP/1.0 200"]
|
|
confidence: medium
|
|
|
|
- name: "Cisco SD-WAN vManage <= 20.17"
|
|
tags: [cisco, sdwan, network]
|
|
ports: [443, 8443]
|
|
probes:
|
|
- type: https
|
|
path: "/dataservice/client/server"
|
|
method: GET
|
|
match_in: body
|
|
patterns: ["platformVersion"]
|
|
version_extract: '"platformVersion":"([0-9.]+)"'
|
|
version_compare:
|
|
operator: "<="
|
|
value: "20.17"
|
|
confidence: high
|
|
|
|
- name: "Open Redis"
|
|
tags: [database, redis, exposed]
|
|
ports: [6379]
|
|
probes:
|
|
- type: tcp_banner
|
|
patterns: ["redis_version"]
|
|
version_extract: "redis_version:([0-9.]+)"
|
|
confidence: high
|