diff --git a/docs/Modules.md b/docs/Modules.md index 10cd1c6a1..62b96a6f1 100644 --- a/docs/Modules.md +++ b/docs/Modules.md @@ -35,6 +35,7 @@ OWASP Nettacker Modules can be of type **Scan** (scan for something), **Vuln** ( - '**pma_scan**' - Scan the target for PHP MyAdmin presence - '**port_scan**' - Scan the target for open ports identifying the popular services using signatures (.e.g SSH on port 2222) - '**smartermail_version_scan**' - Scan the target and identify the SmarterMail version +- '**solarwinds_whd_version_scan**' - Scan the target and identify the SolarWinds Web Help Desk version - '**ssl_expiring_certificate_scan**' - Scan the target for SSL/TLS certificates nearing expiration - '**subdomain_scan**' - Scan the target for subdomains (target must be a domain e.g. owasp.org) - '**viewdns_reverse_iplookup_scan**' - Identify which sites/domains are hosted on the target host using ViewDNS.info diff --git a/nettacker/modules/scan/solarwinds_whd_version.yaml b/nettacker/modules/scan/solarwinds_whd_version.yaml new file mode 100644 index 000000000..26202230a --- /dev/null +++ b/nettacker/modules/scan/solarwinds_whd_version.yaml @@ -0,0 +1,50 @@ +info: + name: solarwinds_whd_version_scan + author: Nettacker Team + severity: 3 + description: fetch SolarWinds Web Help Desk version from target + reference: + - https://www.solarwinds.com/ + profiles: + - scan + - http + - solarwinds + - webhelpdesk + - version + +payloads: + - library: http + steps: + - method: get + timeout: 3 + headers: + User-Agent: "{user_agent}" + Host: "{target}" + allow_redirects: false + ssl: false + url: + nettacker_fuzzer: + input_format: "{{schema}}://{target}:{{ports}}/helpdesk/WebObjects/Helpdesk.woa" + prefix: "" + suffix: "" + interceptors: + data: + schema: + - "http" + - "https" + ports: + - 80 + - 443 + + response: + condition_type: and + conditions: + status_code: + regex: "200" + reverse: false + + content: + regex: "\\?v=([0-9]+_[0-9]+_[0-9]+_[0-9]+)" + reverse: false + + log: "SolarWinds WHD version: response_dependent['content']" \ No newline at end of file