Zoho ManageEngine Network Configuration Manager Panel - Detect

ID: manageengine-network-config

Severity: info

Author: righettod

Tags: panel,zoho,manageengine,zohocorp

Description

ZOHO ManageEngine Network Configuration Manager was detected.

YAML Source

id: manageengine-network-config

info:
  name: Zoho ManageEngine Network Configuration Manager Panel - Detect
  author: righettod
  severity: info
  description: ZOHO ManageEngine Network Configuration Manager was detected.
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
    cpe: cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: zohocorp
    product: manageengine_network_configuration_manager
    shodan-query:
      - http.title:"Network Configuration Manager"
      - http.title:"network configuration manager"
    fofa-query: title="network configuration manager"
    google-query: intitle:"network configuration manager"
  tags: panel,zoho,manageengine,zohocorp

http:
  - method: GET
    path:
      - '{{BaseURL}}/apiclient/ember/Login.jsp'

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'Network Configuration Manager'
          - 'https://www.manageengine.com'
        condition: and

      - type: status
        status:
          - 200
# digest: 490a0046304402201dfca663299c3785046c326c0e994e7213448508fad377db5d7f4c9229a398e202203905c50edd4e986829398e6eaad7edc5bc9599585282afb84bb51694b7641485:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/exposed-panels/zoho/manageengine-network-config.yaml"

View on Github