id: fiftyone-panel

info:
  name: FiftyOne Panel - Detect
  author: rxerium
  severity: info
  description: |
    FiftyOne, an open-source dataset visualization and curation tool for computer vision workflows built by Voxel51, was detected. The app ships with no authentication by default, so any exposed instance directly served browsable dataset content (images, labels, metadata) to unauthenticated visitors. The instance was identified by matching its distinctive page title, meta description, and UI-specific element IDs.
  reference:
    - https://github.com/voxel51/fiftyone
    - https://docs.voxel51.com
  metadata:
    verified: true
    max-request: 1
    vendor: voxel51
    product: fiftyone
    shodan-query: 'http.title:"FiftyOne"'
  tags: panel,fiftyone,ml,ai,computer-vision,detect,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "<title>FiftyOne</title>"
          - "Explore, Analyze, Curate"
          - 'id="colorModal"'
        condition: and

      - type: status
        status:
          - 200
# digest: 490a004630440220346a8c2432bccc5d999df21c9f6bb4d1446e21d87b1711412df097c1f948432c02207ffb8c831ea64887f169925bd560780b721409319374ccf5a0953402962c7408:922c64590222798bb761d5b6d8e72950