id: arthas-web-console

info:
  name: Alibaba Arthas Web Console - Detect
  author: wujiecong
  severity: info
  description: |
   Detected Alibaba Arthas web console interface was detected. Arthas is a Java diagnostic tool that can expose a web-based console when enabled.
  reference:
    - https://arthas.aliyun.com/doc/web-console.html
  metadata:
    verified: true
    max-request: 1
    vendor: alibaba
    product: arthas
    shodan-query: title:"Arthas Console"
    fofa-query: title="Arthas Console"
  tags: panel,arthas,alibaba,web-console,detect

http:
  - method: GET
    path:
      - "{{BaseURL}}/"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains(body, "<title>Arthas Console</title>")'
        condition: and
# digest: 4a0a0047304502203c8b3a05f7dc1dcab5e89e6027c6c779f1aac329c2327b85b05805557c88f724022100dabe71be001c72816482c210c47dc4117e3937ff4350fd37383186ee03f9df4d:922c64590222798bb761d5b6d8e72950