Compare commits

...
Author SHA1 Message Date
Prince Chaddha 58df842883 Update SUSE Manager panel template
- Fix metadata key from max-requests to max-request
- Add impact and remediation sections
- Simplify Shodan query for better performance
- Remove complex FOFA queries not from awesome-search-queries
- Clean up tags and add verified metadata
2025-07-30 20:00:16 -05:00
Chris 1f0b8efc24 Create suse-manager-panel.yaml 2025-07-30 20:50:12 +02:00
@@ -0,0 +1,46 @@
id: suse-manager-panel
info:
name: SUSE Manager Server - Panel
severity: info
author: darses
description: |
Detects SUSE Manager, SUSE Multi-Linux Manager and Uyuni Server panel, and extracts version.
impact: |
Exposed SUSE Manager panels may reveal system management interfaces that should be restricted to authorized users only.
remediation: |
Restrict access to SUSE Manager interfaces by implementing proper network segmentation and authentication controls.
metadata:
verified: true
max-request: 1
vendor: suse
product: manager
shodan-query: title:"SUSE Manager"
tags: panel,suse,uyuni
http:
- method: GET
path:
- "{{BaseURL}}"
redirects: true
max-redirects: 1
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "<title>SUSE Manager - Sign In</title>"
- "<title>SUSE Multi-Linux Manager - Sign In</title>"
- "<title>Uyuni - Sign In</title>"
condition: or
extractors:
- type: regex
group: 1
regex:
- "webVersion:\\s+'([\\d\\.\\s\\w]+)',"