nuclei-templates/http/miscellaneous/exposed-file-upload-form.yaml

id: exposed-file-upload-form

info:
  name: Exposed File Upload Form
  author: geeknik
  severity: info
  classification:
    cpe: cpe:2.3:a:creativedream_file_uploader_project:creativedream_file_uploader:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: creativedream_file_uploader_project
    product: creativedream_file_uploader
    shodan-query: http.html:"multipart/form-data" html:"file"
  tags: miscellaneous,exposure,upload,form,misc,generic

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - <form.*?method=("|')?post("|')?.*?>
          - <form.*?(?i)(?-i)enctype=("|')?multipart\/form-data("|')?.*?>
          - <input.*?type=("|')?file("|')?.*?>
        condition: or

      - type: regex
        regex:
          - "type=[\"'](file)[\"']"
          - 'id="file"'
        condition: or
# digest: 4a0a0047304502200cfb73db19e23ffcae4a653495e61457d91a3a5e7659ab6fe0cfd47e360217fe022100eded2d7e5799285632b56429e71e6d056e7781017d99f25451835073d8feeb60:922c64590222798bb761d5b6d8e72950