nuclei-templates/http/exposed-panels/grafana-detect.yaml

45 lines
1.1 KiB
YAML
Raw Normal View History

2020-04-22 06:42:01 +00:00
id: grafana-detect
info:
name: Grafana Login Panel - Detect
author: organiccrap,AdamCrosser,bhutch
2020-08-03 21:52:00 +00:00
severity: info
description: Grafana login panel was detected.
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
cpe: cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*
2022-07-07 10:16:00 +00:00
metadata:
category: devops
max-request: 2
product: grafana
shodan-query: title:"Grafana"
vendor: grafana
tags: panel,grafana,detect
2020-04-22 06:42:01 +00:00
http:
2020-04-22 06:42:01 +00:00
- method: GET
path:
- "{{BaseURL}}/login"
2023-11-17 23:01:19 +00:00
- "{{BaseURL}}/graph/login"
2023-11-19 00:26:40 +00:00
stop-at-first-match: true
2020-04-22 06:42:01 +00:00
matchers:
- type: word
part: body
2020-04-22 06:42:01 +00:00
words:
2020-05-25 08:13:15 +00:00
- "<title>Grafana</title>"
extractors:
- type: regex
name: version
part: body
group: 1
regex:
- '\"version\"\:\"([0-9.]+)\"}'
2023-06-27 12:49:53 +00:00
- '\"subTitle\":\"Grafana v([0-9.]+)'
- type: kval
kval:
- version
# digest: 490a00463044022075f2a271e73c5f9373ef3f5b28fe05acaf6bf18eaffff0d31ab41deab8ca36fb02204a9039e70a164be9de3d266f50808bdd97ad9294048cc5b2b746d97dcda224e8:922c64590222798bb761d5b6d8e72950