forked from adysec/nuclei_poc
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
8d5b7db
commit 8e503a1
Showing
9 changed files
with
291 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,34 @@ | ||
| id: caprover-default-login | ||
|
|
||
| info: | ||
| name: Caprover - Default Login | ||
| author: ritikchaddha | ||
| severity: high | ||
| description: | | ||
| Caprover defaultl login has been detected. | ||
| metadata: | ||
| verified: true | ||
| max-request: 1 | ||
| shodan-query: http.favicon.hash:988422585 | ||
| tags: caprover,default-login,misconfig | ||
|
|
||
| variables: | ||
| password: captain42 | ||
|
|
||
| http: | ||
| - raw: | ||
| - | | ||
| POST /api/v2/login HTTP/1.1 | ||
| Host: {{Hostname}} | ||
| Content-Type: application/json | ||
| x-namespace: captain | ||
| {"password":"{{password}}"} | ||
| matchers: | ||
| - type: dsl | ||
| dsl: | ||
| - 'contains_all(body, "status\":100", "Login succeeded", "token\":")' | ||
| - 'contains(header, "application/json")' | ||
| - 'status_code == 200' | ||
| condition: and |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,46 @@ | ||
| id: jeedom-default-login | ||
|
|
||
| info: | ||
| name: Jeedom - Default Login | ||
| author: ritikchaddha | ||
| severity: high | ||
| description: | | ||
| Jeedom default login has been detected. | ||
| metadata: | ||
| verified: true | ||
| max-request: 2 | ||
| shodan-query: title:"Jeedom" | ||
| tags: jeedom,default-login,misconfig | ||
|
|
||
| variables: | ||
| username: admin | ||
| password: admin | ||
|
|
||
| http: | ||
| - raw: | ||
| - | | ||
| POST /core/ajax/user.ajax.php HTTP/1.1 | ||
| Host: {{Hostname}} | ||
| Content-Type: application/x-www-form-urlencoded; charset=UTF-8 | ||
| action=login&username={{username}}&password={{password}}&twoFactorCode=&storeConnection=0 | ||
| - | | ||
| GET /index.php?v=d&p=dashboard HTTP/1.1 | ||
| Host: {{Hostname}} | ||
| matchers-condition: and | ||
| matchers: | ||
| - type: word | ||
| part: body_1 | ||
| words: | ||
| - 'state":"ok' | ||
| - 'result":' | ||
| condition: and | ||
|
|
||
| - type: word | ||
| part: body_2 | ||
| words: | ||
| - "logout=1" | ||
| - "Plugins</span>" | ||
| condition: and |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,31 @@ | ||
| id: filestash-admin-config | ||
|
|
||
| info: | ||
| name: Filestash Admin Password Configuration | ||
| author: DhiyaneshDK | ||
| severity: high | ||
| description: | | ||
| Filestash is susceptible to the Admin Password Configuration page exposure due to misconfiguration. | ||
| metadata: | ||
| verified: true | ||
| max-request: 1 | ||
| shodan-query: html:"<title>Admin Console</title>" | ||
| tags: exposure,filestash,config | ||
|
|
||
| http: | ||
| - method: GET | ||
| path: | ||
| - "{{BaseURL}}/admin/setup" | ||
|
|
||
| matchers-condition: and | ||
| matchers: | ||
| - type: word | ||
| part: body | ||
| words: | ||
| - '<title>Admin Console</title>' | ||
| - 'component-loader' | ||
| condition: and | ||
|
|
||
| - type: status | ||
| status: | ||
| - 200 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,34 @@ | ||
| id: caprover-default-login | ||
|
|
||
| info: | ||
| name: Caprover - Default Login | ||
| author: ritikchaddha | ||
| severity: high | ||
| description: | | ||
| Caprover defaultl login has been detected. | ||
| metadata: | ||
| verified: true | ||
| max-request: 1 | ||
| shodan-query: http.favicon.hash:988422585 | ||
| tags: caprover,default-login,misconfig | ||
|
|
||
| variables: | ||
| password: captain42 | ||
|
|
||
| http: | ||
| - raw: | ||
| - | | ||
| POST /api/v2/login HTTP/1.1 | ||
| Host: {{Hostname}} | ||
| Content-Type: application/json | ||
| x-namespace: captain | ||
| {"password":"{{password}}"} | ||
| matchers: | ||
| - type: dsl | ||
| dsl: | ||
| - 'contains_all(body, "status\":100", "Login succeeded", "token\":")' | ||
| - 'contains(header, "application/json")' | ||
| - 'status_code == 200' | ||
| condition: and |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,46 @@ | ||
| id: jeedom-default-login | ||
|
|
||
| info: | ||
| name: Jeedom - Default Login | ||
| author: ritikchaddha | ||
| severity: high | ||
| description: | | ||
| Jeedom default login has been detected. | ||
| metadata: | ||
| verified: true | ||
| max-request: 2 | ||
| shodan-query: title:"Jeedom" | ||
| tags: jeedom,default-login,misconfig | ||
|
|
||
| variables: | ||
| username: admin | ||
| password: admin | ||
|
|
||
| http: | ||
| - raw: | ||
| - | | ||
| POST /core/ajax/user.ajax.php HTTP/1.1 | ||
| Host: {{Hostname}} | ||
| Content-Type: application/x-www-form-urlencoded; charset=UTF-8 | ||
| action=login&username={{username}}&password={{password}}&twoFactorCode=&storeConnection=0 | ||
| - | | ||
| GET /index.php?v=d&p=dashboard HTTP/1.1 | ||
| Host: {{Hostname}} | ||
| matchers-condition: and | ||
| matchers: | ||
| - type: word | ||
| part: body_1 | ||
| words: | ||
| - 'state":"ok' | ||
| - 'result":' | ||
| condition: and | ||
|
|
||
| - type: word | ||
| part: body_2 | ||
| words: | ||
| - "logout=1" | ||
| - "Plugins</span>" | ||
| condition: and |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,32 @@ | ||
| id: forgejo-repo-exposure | ||
|
|
||
| info: | ||
| name: Forgejo Repositories - Exposure | ||
| author: DhiyaneshDK | ||
| severity: medium | ||
| description: | | ||
| The Forgejo repo is being exposed publically. | ||
| metadata: | ||
| verified: true | ||
| max-request: 1 | ||
| shodan-query: html:"Forgejo" | ||
| tags: misconfig,exposure,forgejo | ||
|
|
||
| http: | ||
| - method: GET | ||
| path: | ||
| - "{{BaseURL}}/explore/repos" | ||
|
|
||
| matchers-condition: and | ||
| matchers: | ||
| - type: word | ||
| part: body | ||
| words: | ||
| - 'Powered by Forgejo' | ||
| - 'Explore</a>' | ||
| - 'Repositories' | ||
| condition: and | ||
|
|
||
| - type: status | ||
| status: | ||
| - 200 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,29 @@ | ||
| id: piwigo-installer | ||
|
|
||
| info: | ||
| name: Piwigo Installation Page - Exposure | ||
| author: DhiyaneshDK | ||
| severity: high | ||
| description: | | ||
| Piwigo is susceptible to the Installation page exposure due to misconfiguration. | ||
| metadata: | ||
| verified: true | ||
| max-request: 1 | ||
| shodan-query: html:"Piwigo" html:"- Installation" | ||
| tags: misconfig,exposure,install,piwigo | ||
|
|
||
| http: | ||
| - method: GET | ||
| path: | ||
| - "{{BaseURL}}/install.php" | ||
|
|
||
| matchers-condition: and | ||
| matchers: | ||
| - type: regex | ||
| part: body | ||
| regex: | ||
| - 'Piwigo ([0-9.]+) \- Installation' | ||
|
|
||
| - type: status | ||
| status: | ||
| - 200 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,31 @@ | ||
| id: poste-io-installer | ||
|
|
||
| info: | ||
| name: Poste.io - Installer | ||
| author: DhiyaneshDK | ||
| severity: high | ||
| description: | | ||
| Poste.io is susceptible to the Installation page exposure due to misconfiguration. | ||
| metadata: | ||
| verified: true | ||
| max-request: 1 | ||
| fofa-query: body="Initial server configuration" | ||
| tags: misconfig,exposure,poste-io,install | ||
|
|
||
| http: | ||
| - method: GET | ||
| path: | ||
| - "{{BaseURL}}/admin/install/server" | ||
|
|
||
| matchers-condition: and | ||
| matchers: | ||
| - type: word | ||
| part: body | ||
| words: | ||
| - 'Initial server configuration' | ||
| - 'poste' | ||
| condition: and | ||
|
|
||
| - type: status | ||
| status: | ||
| - 200 |