WS_FTP Server Web Transfer - Panel Detect

ID: ws_ftp-server-web-transfer

Severity: info

Author: johnk3r

Tags: panel,ws_ftp,progress

Description

WS_FTP Server Web Transfer panel was detected.

YAML Source

id: ws_ftp-server-web-transfer

info:
  name: WS_FTP Server Web Transfer - Panel Detect
  author: johnk3r
  severity: info
  description: WS_FTP Server Web Transfer panel was detected.
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
  metadata:
    verified: true
    max-request: 1
    vendor: progress
    product: ws_ftp
    shodan-query:
      - http.title:"WS_FTP Server Web Transfer"
      - ws_ftp port:22
      - http.title:"ad hoc transfer"
      - http.title:"ws_ftp server web transfer"
    censys-query:
      - services.http.request.uri="*/ThinClient/WTM/public/index.html"
      - services.http.request.uri="*/thinclient/wtm/public/index.html"
    fofa-query:
      - title="ws_ftp server web transfer"
      - title="ad hoc transfer"
    google-query:
      - intitle:"ws_ftp server web transfer"
      - intitle:"ad hoc transfer"
  tags: panel,ws_ftp,progress

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    redirects: true
    max-redirects: 3
    matchers:
      - type: dsl
        dsl:
          - contains(body, 'Web Transfer Client')
          - status_code == 200
        condition: and
# digest: 490a0046304402207041499582a9ba0765c5210bca098b8791764c862bb13634f19a6aa59f2d47ea0220299039672a080aa7cf9437ff0fb0c0dde6730a9b53bd0dadb968e4f535ebdf83:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/exposed-panels/ws_ftp-server-web-transfer.yaml"

View on Github