Skip to content

Commit b0c624d

Browse files
authored
Add cryptshare-detect (#12405)
1 parent a4f2b4f commit b0c624d

1 file changed

Lines changed: 48 additions & 0 deletions

File tree

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
id: cryptshare-detect
2+
3+
info:
4+
name: Pointsharp Cryptshare - Detect
5+
author: darses
6+
severity: info
7+
description: |
8+
Detects the presence of Pointsharp Cryptshare secure email and file sharing server.
9+
metadata:
10+
verified: true
11+
max-request: 3
12+
shodan-query:
13+
- http.favicon.hash:-672476364
14+
- http.favicon.hash:-1059646869
15+
- "Set-Cookie: cs-ui-session="
16+
fofa-query:
17+
- icon_hash="-672476364"
18+
- icon_hash="-1059646869"
19+
- "Set-Cookie: cs-ui-session="
20+
vendor: Pointsharp
21+
product: Cryptshare
22+
reference:
23+
- https://www.pointsharp.com/en/products/cryptshare
24+
tags: detect
25+
26+
http:
27+
- method: GET
28+
path:
29+
- "{{BaseURL}}/Start?0"
30+
31+
matchers-condition: and
32+
matchers:
33+
- type: status
34+
status:
35+
- 200
36+
37+
- type: word
38+
part: body
39+
words:
40+
- 'name="generator" content="Cryptshare'
41+
42+
extractors:
43+
- type: regex
44+
name: version
45+
part: body
46+
regex:
47+
- '<span>([\d\.]+)</span>\n<span>licensed for</span>'
48+
group: 1

0 commit comments

Comments
 (0)