Skip to content

ONLYOFFICE Login Panel - Detect

ID: onlyoffice-login-panel

Severity: info

Author: eremit4

Tags: panel,onlyoffice,detect

ONLYOFFICE Community Server is a free open-source collaborative system developed to manage documents, projects, customer relationship and email correspondence.

id: onlyoffice-login-panel
info:
name: ONLYOFFICE Login Panel - Detect
author: eremit4
severity: info
description: |
ONLYOFFICE Community Server is a free open-source collaborative system developed to manage documents, projects, customer relationship and email correspondence.
classification:
cpe: cpe:2.3:a:onlyoffice:onlyoffice:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 2
vendor: onlyoffice
product: onlyoffice
fofa-query:
- app="ONLYOFFICE" && (icon_hash="1928933157" || icon_hash="826083956" || icon_hash="-1380930248" || icon_hash="-285544629" || icon_hash="812741391")
- app="onlyoffice" && (icon_hash="1928933157" || icon_hash="826083956" || icon_hash="-1380930248" || icon_hash="-285544629" || icon_hash="812741391")
tags: panel,onlyoffice,detect
http:
- method: GET
path:
- "{{BaseURL}}"
- "{{BaseURL}}/auth.aspx"
stop-at-first-match: true
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'ONLYOFFICE'
- 'title="ONLYOFFICE'
- 'content="ONLYOFFICE'
- '/images/onlyoffice_logo/'
- 'alt="ONLYOFFICE'
condition: or
- type: status
status:
- 200
# digest: 490a0046304402201fc4cd001d5a8326d78f79ae949cb94cbd9b0f84531629f86a23987d12ff67a902204d33ad3d6bc138df8a78fc07b153b87c037b2dd5114bc1fe5797a3c5d4b49741:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/exposed-panels/onlyoffice-login-panel.yaml"

View on Github