Bitrix Login Panel

ID: bitrix-login

Severity: info

Author: juicypotato1,malwarework

Tags: panel,bitrix,login

Description

Bitrix24 is a unified work space that places a complete set of business tools into a single, intuitive interface.

YAML Source

id: bitrix-login

info:
  name: Bitrix Login Panel
  author: juicypotato1,malwarework
  severity: info
  description: |
    Bitrix24 is a unified work space that places a complete set of business tools into a single, intuitive interface.
  classification:
    cwe-id: CWE-200
    cpe: cpe:2.3:a:bitrix:bitrix24:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    verified: true
    vendor: bitrix
    product: bitrix24
    shodan-query: http.html:"/bitrix/"
    fofa-query: body="/bitrix/"
  tags: panel,bitrix,login

http:
  - method: GET
    path:
      - "{{BaseURL}}/bitrix/admin/"
      - "{{BaseURL}}/bitrix/components/bitrix/map.yandex.view/settings/settings.php"

    host-redirects: true
    max-redirects: 2
    stop-at-first-match: true
    matchers:
      - type: word
        words:
          - "USER_LOGIN"
          - "/bitrix/js/main/"
        condition: and
# digest: 490a004630440220326cd07ca10eaca934439d8fa731afac3a2afbb5b1373f396f0cef1e2a4c025b022077c0db43f1e4cee9e5e8b8ef212bd0defeb983dcb8ef125edfd165ea08c64cd8:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/exposed-panels/bitrix-panel.yaml"

View on Github