nuclei-templates/http/misconfiguration/transmission-dashboard.yaml

id: transmission-dashboard

info:
  name: Transmission Dashboard - Detect
  author: fabaff
  severity: medium
  description: Transmission dashboard was detected.
  reference:
    - https://transmissionbt.com/
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    cvss-score: 5.3
    cwe-id: CWE-200
    cpe: cpe:2.3:a:transmissionbt:transmission:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    shodan-query: http.title:"Transmission Web Interface"
    product: transmission
    vendor: transmissionbt
  tags: misconfig,transmission,exposure,dashboard

http:
  - method: GET
    path:
      - "{{BaseURL}}/transmission/web/"

    host-redirects: true
    max-redirects: 2

    matchers-condition: or
    matchers:
      - type: word
        part: body
        words:
          - 'The Transmission Project'
          - 'Transmission Web Interface'
        condition: and

      - type: word
        part: server
        words:
          - 'Transmission'
# digest: 490a0046304402203fe3d93fac0091332f5b8ceb06445a480f88035a9fa8dbc697307aee85263eeb0220725eaa3bad83f5b4356d18cf8800ee939a662c5e16c95ba0407071f6fbdb423e:922c64590222798bb761d5b6d8e72950
Support to detect Transmission webinterfaces 2023-01-30 21:02:19 +00:00			`id: transmission-dashboard`

			`info:`
Enhancement: misconfiguration/transmission-dashboard.yaml by md 2023-03-15 14:18:22 +00:00			`name: Transmission Dashboard - Detect`
Support to detect Transmission webinterfaces 2023-01-30 21:02:19 +00:00			`author: fabaff`
fixed-template 2023-01-31 04:39:15 +00:00			`severity: medium`
Enhancement: misconfiguration/transmission-dashboard.yaml by md 2023-03-15 14:18:22 +00:00			`description: Transmission dashboard was detected.`
Support to detect Transmission webinterfaces 2023-01-30 21:02:19 +00:00			`reference:`
			`- https://transmissionbt.com/`
Enhancement: misconfiguration/transmission-dashboard.yaml by md 2023-03-15 14:18:22 +00:00			`classification:`
			`cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`
			`cvss-score: 5.3`
			`cwe-id: CWE-200`
Add missing cpes Added missing cpes 2024-09-10 08:22:50 +00:00			`cpe: cpe:2.3:a:transmissionbt:transmission::::::::`
Support to detect Transmission webinterfaces 2023-01-30 21:02:19 +00:00			`metadata:`
			`verified: true`
templateman update 2023-10-14 11:27:55 +00:00			`max-request: 1`
shodan-query -update 2023-01-31 03:13:16 +00:00			`shodan-query: http.title:"Transmission Web Interface"`
Add missing cpes Added missing cpes 2024-09-10 08:22:50 +00:00			`product: transmission`
			`vendor: transmissionbt`
fixed-template 2023-01-31 04:39:15 +00:00			`tags: misconfig,transmission,exposure,dashboard`
Support to detect Transmission webinterfaces 2023-01-30 21:02:19 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Support to detect Transmission webinterfaces 2023-01-30 21:02:19 +00:00			`- method: GET`
			`path:`
minor -updates 2023-01-31 03:40:09 +00:00			`- "{{BaseURL}}/transmission/web/"`
Support to detect Transmission webinterfaces 2023-01-30 21:02:19 +00:00
			`host-redirects: true`
fixed-template 2023-01-31 04:39:15 +00:00			`max-redirects: 2`
templateman update 2023-10-14 11:27:55 +00:00
Support to detect Transmission webinterfaces 2023-01-30 21:02:19 +00:00			`matchers-condition: or`
			`matchers:`
			`- type: word`
			`part: body`
			`words:`
			`- 'The Transmission Project'`
			`- 'Transmission Web Interface'`
			`condition: and`

			`- type: word`
fixed-template 2023-01-31 04:39:15 +00:00			`part: server`
Support to detect Transmission webinterfaces 2023-01-30 21:02:19 +00:00			`words:`
			`- 'Transmission'`
chore: sign templates 🤖 2024-09-12 05:14:01 +00:00			`# digest: 490a0046304402203fe3d93fac0091332f5b8ceb06445a480f88035a9fa8dbc697307aee85263eeb0220725eaa3bad83f5b4356d18cf8800ee939a662c5e16c95ba0407071f6fbdb423e:922c64590222798bb761d5b6d8e72950`