Matomo Panel - Detect

ID: matomo-panel

Severity: info

Author: Arr0way,userdehghani

Tags: panel,matomo,login,detect

Description

google analytics alternative that protects your data and your customers privacy.

YAML Source

id: matomo-panel

info:
  name: Matomo Panel - Detect
  author: Arr0way,userdehghani
  severity: info
  description: |
    google analytics alternative that protects your data and your customers privacy.
  reference:
    - https://matomo.org/
    - https://matomo.org/faq/on-premise/installing-matomo/#getting-started
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
    cpe: cpe:2.3:a:matomo:matomo:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 3
    vendor: matomo
    product: matomo
    shodan-query:
      - "http.favicon.hash:-2023266783"
      - cpe:"cpe:2.3:a:matomo:matomo"
    fofa-query: icon_hash=-2023266783
  tags: panel,matomo,login,detect

http:
  - method: GET
    path:
      - "{{BaseURL}}"
      - "{{BaseURL}}/index.php"
      - "{{BaseURL}}/plugins/CoreHome/images/favicon.png"

    stop-at-first-match: true
    matchers-condition: or
    matchers:
      - type: word
        part: body
        words:
          - 'Sign in - Matomo'
          - 'content="Matomo'
          - 'title="Matomo'
        condition: or
        case-insensitive: true

      - type: dsl
        dsl:
          - "status_code==200 && (\"-2023266783\" == mmh3(base64_py(body)))"
# digest: 4b0a00483046022100ce728e9a3fb374936418592f21c07f2bc655c9ff39fb8629210eb265a785f9c3022100fb197f027b5854c3b817fc653046e08bd3dbdf9576a2db59cc94ad451e5644c1:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/exposed-panels/matomo-panel.yaml"

View on Github