nuclei-templates/technologies/clockwork-php-page.yaml

25 lines
613 B
YAML
Raw Normal View History

2020-07-02 13:53:41 +00:00
id: clockwork-php-page
info:
name: Clockwork PHP page exposure
author: organiccrap
severity: high
reference: https://twitter.com/damian_89_/status/1250721398747791360
2020-07-02 13:53:41 +00:00
requests:
- method: GET
path:
- '{{BaseURL}}/__clockwork/app'
headers:
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- <title>Clockwork</title>
- <html ng-app="Clockwork" ng-csp="">
part: body
condition: or