id: netgear-version-detect

info:
  name: NETGEAR Router Panel - Detect
  author: dwisiswant0
  severity: info
  description: NETGEAR router panel was detected.
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
  metadata:
    max-request: 1
  tags: panel,router,netgear

http:
  - method: GET
    path:
      - "{{BaseURL}}/currentsetting.htm"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: regex
        part: body
        regex:
          - "^((((Re(adyShareSupportedLevel|gionTag)|InternetConnectionStatus|SOAPVersion|Firmware|Model)|Region)|LoginMethod)|ParentalControlSupported)="

    extractors:
      - type: regex
        part: body
        regex:
          - "Model=([^\\s]+)"
          - "Firmware=([^\\s]+)"
# digest: 490a00463044022006a4dcbd302d12258ac15fa4f30fd2b5117263f7fd289c4fca72f725a698318f02207a6cc52c5647de2b511351e383ab3387ccfadcaa96c133794dd68daa14c7b921:922c64590222798bb761d5b6d8e72950