id: deepstack-panel

info:
  name: DeepStack AI Server Panel - Detect
  author: rxerium
  severity: info
  description: |
    DeepStack, an open-source, self-hosted computer-vision (AI) server that provides object, face, and scene detection APIs, commonly deployed alongside home-automation stacks such as Home Assistant and Frigate on port 5000, was detected. An exposed, unauthenticated DeepStack landing/activation page was identified.
  reference:
    - https://github.com/johnolafenwa/DeepStack
    - https://deepstack.cc
    - http://dev.deepstack.cc
  metadata:
    verified: true
    max-request: 1
    vendor: deepstackai
    product: deepstack
    shodan-query: 'html:"DeepStack Activated"'
  tags: panel,deepstack,ai,computer-vision,detect,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "DeepStack Activated"
          - "deepstack.cc"
          - "<title>DeepStack</title>"
        condition: and

      - type: status
        status:
          - 200
# digest: 4a0a00473045022100ac3dec57b063b7736cb916ea6f0e751d8c71fd3f0381deec5eac19e1bfb84926022054ec34e4c3df2a2a3a33c16865fdb1247cebfc547d425b5d1977bee6652d1ba8:922c64590222798bb761d5b6d8e72950