Create wsftp-detect.yaml (#8285)

* Create wsftp-detect.yaml * Update and rename wsftp-detect.yaml to wsftp-ssh-detect.yaml * Update and rename wsftp-ssh-detect.yaml to ws_ftp-ssh-detect.yaml * Create ws_ftp-server-web-transfer.yaml * misc update * Update ws_ftp-server-web-transfer.yaml * Update ws_ftp-ssh-detect.yaml --------- Co-authored-by: sandeep <[email protected]>
projectdiscovery · Sep 30, 2023 · f953aca · f953aca
1 parent f10d3a0
commit f953aca
Show file tree

Hide file tree

Showing 2 changed files with 72 additions and 0 deletions.
diff --git a/http/exposed-panels/ws_ftp-server-web-transfer.yaml b/http/exposed-panels/ws_ftp-server-web-transfer.yaml
@@ -0,0 +1,38 @@
+id: ws_ftp-server-web-transfer
+
+info:
+  name: WS_FTP Server Web Transfer - Panel Detect
+  author: johnk3r
+  severity: info
+  description: WS_FTP Server Web Transfer panel was detected.
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
+    cvss-score: 0.0
+    cwe-id: CWE-200
+  metadata:
+    max-request: 1
+    verified: true
+    vendor: progress
+    product: ws_ftp
+    shodan-query: http.title:"WS_FTP Server Web Transfer"
+  tags: panel,ws_ftp
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    host-redirects: true
+    max-redirects: 3
+    stop-at-first-match: true
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'WS_FTP Server Web Transfer Client'
+        condition: and
+
+      - type: status
+        status:
+          - 200
diff --git a/network/detection/ws_ftp-ssh-detect.yaml b/network/detection/ws_ftp-ssh-detect.yaml
@@ -0,0 +1,34 @@
+id: ws_ftp-ssh-detect
+
+info:
+  name: WS_FTP-SSH Service - Detect
+  author: johnk3r
+  severity: info
+  description: |
+    WS_FTP-SSH service was detected.
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
+    cvss-score: 0.0
+    cwe-id: CWE-200
+  metadata:
+    verified: true
+    max-request: 1
+    vendor: progress
+    product: ws_ftp
+    shodan-query: "WS_FTP port:22"
+  tags: network,ssh,ws_ftp
+
+tcp:
+  - host:
+      - "{{Hostname}}"
+    port: 22
+
+    matchers:
+      - type: regex
+        regex:
+          - '(?i)WS_FTP-SSH'
+
+    extractors:
+      - type: regex
+        regex:
+          - '(?i)SSH-(.*)-WS_FTP-SSH[^\r]+'