Skip to content

Joget Panel - Detect

ID: joget-panel

Severity: info

Author: Podalirius

Tags: panel,joget

Joget panel was detected.

id: joget-panel
info:
name: Joget Panel - Detect
author: Podalirius
severity: info
description: Joget panel was detected.
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
cpe: cpe:2.3:a:joget:joget_dx:*:*:*:*:*:*:*:*
metadata:
max-request: 1
shodan-query: http.favicon.hash:-1343712810
product: joget_dx
vendor: joget
tags: panel,joget
http:
- method: GET
path:
- '{{BaseURL}}/jw/web/;'
matchers-condition: and
matchers:
- type: word
words:
- 'System Error'
- type: status
status:
- 500
extractors:
- type: regex
part: body
group: 2
regex:
- '<li>(Version:[ \n\t]*([^<]+)[ \n\t]*)</li>'
# digest: 490a004630440220420785bd638db3b2f14d5f1f77fab70c2679c26e3a741956a753040b6f3a3e070220414803dfe65cd5d0086b3bff33f47a2d14482d362fc6a5433431538f77737de6:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/exposed-panels/joget/joget-panel.yaml"

View on Github