id: fortinet-fortianalyzer-panel

info:
  name: Fortinet FortiAnalyzer - Login Panel
  author: rxerium
  severity: info
  description: |
    Fortinet FortiAnalyzer is a centralised log management and analytics platform for
    Fortinet security devices. The web management console is commonly internet-exposed
    on ports 443, 10443, 9443, or 4443.
  reference:
    - https://www.fortinet.com/products/management/fortianalyzer
  metadata:
    max-request: 1
    shodan-query: 'http.title:"FortiAnalyzer"'
  tags: panel,fortinet,fortianalyzer,network,vpn,ics

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    redirects: true
    max-redirects: 2
    matchers-condition: and
    matchers:
      - type: word
        words:
          - "FortiAnalyzer"
        part: body

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100856fd246ddbd32e7ac8639e085b6345f8f4f3277193adbf7e34eeaed5ae09272022100aa29762db20a567e620a9d685ba478565860e6d6f92d4752f06ea9a74c2d0287:922c64590222798bb761d5b6d8e72950