Compare commits

...
Author SHA1 Message Date
Prince Chaddha f29e90a016 Update huawei-holosense-panel template with improved metadata and structure
- Added reference to official Huawei product page
- Fixed max-request vs max-requests field naming for consistency
- Added panel and iot tags for better categorization
- Enhanced template structure following review guidelines
2025-07-15 18:19:44 +04:00
Chris 1c9ceaebea Fix yamllint 2025-07-14 22:55:44 +02:00
Chris 85e3f928d1 Update huawei-holosense-panel
- Additiona shodan/fofa queries
2025-07-14 22:49:48 +02:00
Chris 22488362a8 Create huawei-holosense-panel.yaml 2025-07-14 22:37:19 +02:00
@@ -0,0 +1,95 @@
id: huawei-holosense-panel
info:
name: Huawei HoloSens SDC - Panel
severity: info
author: darses
description: |
Detects login panel of Huawei HoloSens SDC, a software-based Internet of Things camera with a modern and high-quality appearance.
reference:
- https://www.huawei.com/en/products/intelligent-devices/holosens-sdc
metadata:
max-request: 3
vendor: huawei
product: holosense_sdc
shodan-query:
- "Server: SDC Server"
- http.html_hash:-968212412
fofa-query:
- '"Server: SDC Server" && protocol="https"'
- '"Server: WebServer/1.0.0" && port="1443"'
tags: panel,detect,huawei,holosens,iot
flow: http(1) && http(2) && http(3)
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: header
words:
- "Server: SDC Server"
- "Server: WebServer/1.0.0"
condition: or
- type: word
part: body
words:
- "cmcc-login"
- method: POST
path:
- "{{BaseURL}}/cgi-bin/main.cgi"
body: |
action=LoginState&glToken=null&stChannelId=101&channelId=101&para=
matchers-condition: and
matchers:
- type: status
internal: true
status:
- 200
- type: word
part: body
internal: true
words:
- "LOGIN_NORMAL"
- method: POST
path:
- "{{BaseURL}}/cgi-bin/main.cgi"
body: |
action=WebTransterToRestLogout&url=GET+%2FSDCAPI%2FV1.0%2FCustomization%2FElement%0D%0A%0D%0A
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: body
words:
- '"brand": "HoloSens SDC"'
extractors:
- type: json
name: version
json:
- .brandInfoObject.version
- type: json
name: model
json:
- .brandInfoObject.model