2024-04-08 08:13:43 +00:00
|
|
|
id: thanos-prometheus-exposure
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: Thanos Prometheus Setup - Exposure
|
2024-11-01 20:54:49 +00:00
|
|
|
author: DhiyaneshDk,righettod
|
2024-04-08 08:13:43 +00:00
|
|
|
severity: high
|
2024-11-01 20:54:49 +00:00
|
|
|
description: |
|
|
|
|
|
Thanos graph endpoint was detected.
|
|
|
|
|
reference:
|
|
|
|
|
- https://thanos.io/
|
|
|
|
|
- https://github.com/thanos-io/thanos
|
2024-04-08 08:13:43 +00:00
|
|
|
metadata:
|
|
|
|
|
verified: true
|
2024-11-01 20:54:49 +00:00
|
|
|
max-request: 2
|
2024-04-08 08:13:43 +00:00
|
|
|
shodan-query: title:"Thanos | Highly available Prometheus setup"
|
|
|
|
|
fofa-query: icon_hash="29632872"
|
2024-06-07 10:04:29 +00:00
|
|
|
tags: thanos,prometheus,exposure,setup,misconfig
|
2024-04-08 08:13:43 +00:00
|
|
|
|
|
|
|
|
http:
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- "{{BaseURL}}/graph"
|
2024-11-01 20:54:49 +00:00
|
|
|
- "{{BaseURL}}/classic/graph"
|
2024-04-08 08:16:14 +00:00
|
|
|
|
2024-11-01 20:54:49 +00:00
|
|
|
stop-at-first-match: true
|
2024-04-08 08:13:43 +00:00
|
|
|
matchers:
|
2024-11-01 20:54:49 +00:00
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
|
|
|
|
- 'status_code == 200'
|
|
|
|
|
- 'contains_all(body, "THANOS_COMPONENT", "THANOS_QUERY_URL") || contains_all(body, "<title>Thanos", "href=\"/classic/\">Thanos</a>")'
|
2024-04-08 08:13:43 +00:00
|
|
|
condition: and
|
2024-11-01 20:57:34 +00:00
|
|
|
# digest: 4b0a00483046022100f8f26aad83b4b0162f73962102847bd51cda6dcb0cb3385b26ce3b0e716cadea022100c63e4a1a2e541904ddd90bff7e095310d93972002ff7952f62c8acc6fd615eb6:922c64590222798bb761d5b6d8e72950
|
