nuclei-templates/misconfiguration/artifactory-anonymous-deplo...

30 lines
568 B
YAML
Raw Normal View History

id: artifactory-anonymous-deploy
info:
2021-06-07 19:03:06 +00:00
name: Artifactory anonymous deploy
author: panch0r3d
severity: high
reference:
- https://www.errno.fr/artifactory/Attacking_Artifactory.html
2021-06-07 19:03:06 +00:00
tags: artifactory
requests:
- method: GET
path:
- "{{BaseURL}}/artifactory/ui/repodata?deploy=true"
2021-06-07 19:03:06 +00:00
matchers-condition: and
matchers:
2021-06-07 19:03:06 +00:00
- type: word
words:
- '"repoKey"'
part: body
2021-06-07 19:03:06 +00:00
- type: status
status:
- 200
- type: word
words:
- "application/json"
part: header