feat(modules): add guacamole and webmin login exposure modules (#298)

* feat(modules): add guacamole and webmin login exposure modules

* chore(modules): trim redundant module header comments

drop the leading comment restating id/name on guacamole-login-exposure and webmin-login-exposure

modules/recon/guacamole-login-exposure.yaml

@@ -0,0 +1,35 @@
+id: guacamole-login-exposure
+info:
+  name: Apache Guacamole Login Exposure
+  author: sif
+  severity: low
+  description: Detects an internet-reachable Apache Guacamole login page, a browser-based remote desktop/ssh gateway that should never sit directly on the open internet
+  tags: [guacamole, remote-access, rdp, vnc, ssh, gateway, exposure, recon]
+
+type: http
+
+http:
+  method: GET
+  paths:
+    - "{{BaseURL}}/guacamole/"
+    - "{{BaseURL}}/"
+
+  matchers:
+    - type: status
+      status:
+        - 200
+
+    - type: word
+      part: body
+      condition: and
+      words:
+        - "guacamole-common-js"
+        - "<guac-login"
+
+  extractors:
+    - type: regex
+      name: guacamole_build_id
+      part: body
+      regex:
+        - 'guacamole-common-js/all\.min\.js\?b=([^"&]+)'
+      group: 1

modules/recon/webmin-login-exposure.yaml

@@ -0,0 +1,38 @@
+id: webmin-login-exposure
+info:
+  name: Webmin Login Exposure
+  author: sif
+  severity: low
+  description: Detects an internet-reachable Webmin login page, a browser-based root system administration console that should never sit directly on the open internet
+  tags: [webmin, remote-access, admin, sysadmin, miniserv, gateway, exposure, recon]
+
+type: http
+
+http:
+  method: GET
+  paths:
+    - "{{BaseURL}}/session_login.cgi"
+    - "{{BaseURL}}/"
+
+  matchers:
+    - type: status
+      status:
+        - 200
+
+    - type: word
+      part: header
+      words:
+        - "MiniServ"
+
+    - type: word
+      part: body
+      words:
+        - "Login to Webmin"
+
+  extractors:
+    - type: regex
+      name: webmin_version
+      part: header
+      regex:
+        - 'MiniServ/([0-9]+\.[0-9]+)'
+      group: 1