Merge pull request #9705 from rxerium/tpot-detect

Tpot Honeypot detection

http/honeypot/tpot-honeypot-detect.yaml

@@ -0,0 +1,30 @@
+id: tpot-honeypot-detect
+
+info:
+ name: T-Pot Honeypot - Detect
+ author: rxerium
+ severity: info
+ description: |
+ A tpot dashboard has been detected
+ reference:
+ - https://github.com/telekom-security/tpotce
+ tags: tpot,honeypot
+
+http:
+ - method: GET
+ path:
+ - "{{BaseURL}}"
+
+ matchers-condition: and
+ matchers:
+ - type: word
+ part: body
+ words:
+ - "<title>T-Pot</title>"
+ - "T-Pot @ Github"
+ - "T-Pot ReadMe"
+ condition: and
+
+ - type: status
+ status:
+ - 200