2021-09-30 16:49:10 +00:00
|
|
|
id: skycaiji-install
|
|
|
|
|
|
|
|
|
|
info:
|
2022-07-26 13:45:11 +00:00
|
|
|
name: SkyCaiji - Exposed Installation
|
2021-09-30 16:49:10 +00:00
|
|
|
author: pikpikcu
|
|
|
|
|
severity: high
|
2022-07-26 13:45:11 +00:00
|
|
|
description: SkyCaiji was discovered.
|
2021-10-08 06:36:44 +00:00
|
|
|
tags: tech,skycaiji,exposure,misconfig
|
2021-09-30 16:49:10 +00:00
|
|
|
|
|
|
|
|
requests:
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- '{{BaseURL}}/index.php?s=/install/index/index'
|
|
|
|
|
|
|
|
|
|
matchers-condition: and
|
|
|
|
|
matchers:
|
|
|
|
|
- type: word
|
|
|
|
|
part: body
|
|
|
|
|
words:
|
|
|
|
|
- '<title>蓝天采集器 SkyCaiji 安装</title>'
|
|
|
|
|
- 'https://www.skycaiji.com'
|
2021-10-08 06:36:44 +00:00
|
|
|
- '<a href="/index.php?s=/Install/Index/step1" class="btn btn-lg btn-success">'
|
2021-09-30 16:49:10 +00:00
|
|
|
condition: and
|
|
|
|
|
|
|
|
|
|
- type: status
|
|
|
|
|
status:
|
|
|
|
|
- 200
|
2022-07-26 13:45:11 +00:00
|
|
|
|
|
|
|
|
# Enhanced by mp on 2022/07/21
|
