Skip to content

Zoraxy Login Panel - Detect

ID: zoraxy-panel

Severity: info

Author: righettod

Tags: panel,zoraxy,login

Zoraxy products was detected.

id: zoraxy-panel
info:
name: Zoraxy Login Panel - Detect
author: righettod
severity: info
description: |
Zoraxy products was detected.
reference:
- https://github.com/tobychui/zoraxy
- https://zoraxy.aroz.org/
metadata:
max-request: 1
verified: true
shodan-query: http.title:"Login | Zoraxy"
tags: panel,zoraxy,login
http:
- method: GET
path:
- "{{BaseURL}}/web/login.html"
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains_any(to_lower(body), "zoraxy</title>", "zoraxy.csrf.token")'
condition: and
# digest: 4a0a0047304502203e640dce591682094dcf934e4035a2538d96247ccf7deb98717d2923dbc0d3b40221009b05253b3b1a3d49c68e4905b1edc48737ccfa95e2fdb1cff1de7ab6e71fecc3:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/exposed-panels/zoraxy-panel.yaml"

View on Github