Skip to content
Nuclei Templates

Axway SecureTransport Login Panel - Detect

ID: axway-securetransport-panel

Severity: info

Author: righettod

Tags: panel,axway,securetransport

Description

Section titled “Description”

AXWAY SecureTransport login panel was detected.

YAML Source

Section titled “YAML Source”
id: axway-securetransport-panel


info:
  name: Axway SecureTransport Login Panel - Detect
  author: righettod
  severity: info
  description: |
    AXWAY SecureTransport login panel was detected.
  reference:
    - https://www.axway.com/en/products/managed-file-transfer/securetransport
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
    cpe: cpe:2.3:a:axway:securetransport:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: axway
    product: securetransport
    shodan-query:
      - http.title:"SecureTransport" || http.favicon.hash:1330269434
      - http.title:"st web client"
      - http.title:"securetransport" || http.favicon.hash:1330269434
    google-query:
      - intitle:"st web client"
      - intitle:"securetransport" || http.favicon.hash:1330269434
    fofa-query:
      - title="securetransport" || http.favicon.hash:1330269434
      - title="st web client"
  tags: panel,axway,securetransport


http:
  - method: GET
    path:
      - '{{BaseURL}}'


    host-redirects: true
    max-redirects: 2


    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - '<title>Axway SecureTransport'
          - 'alt="Axway SecureTransport"'
          - 'Welcome to SecureTransport'
          - 'PrintServerInfo("SecureTransport'
        condition: or


      - type: status
        status:
          - 200


    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - '"SecureTransport", "([0-9.]+)",'
# digest: 4b0a00483046022100d585e5e80e8a141bbc4261b0af6b85e17ae70a36674d5238a4cbd6901639e9b1022100fc02bdb1f2bcc018aa8d1cdb1908f4089b31f3cf41dae75d9cf4bb3c76fbf2ae:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/exposed-panels/axway-securetransport-panel.yaml"

View on Github