daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/exposed-panels/phpmyadmin-panel.yaml

52 lines
1.4 KiB
YAML
Raw Normal View History

Added templates
2020-04-04 18:19:48 +00:00
id: phpmyadmin-panel
info:
Dashboard Content Enhancements (#6289) Dashboard Content Enhancements
2022-12-08 13:42:03 +00:00
name: phpMyAdmin Panel - Detect
Add request to base context
2024-02-07 16:37:43 +00:00
author: pdteam,righettod
uniform severity update
2020-08-03 21:52:00 +00:00
severity: info
Dashboard Content Enhancements (#6289) Dashboard Content Enhancements
2022-12-08 13:42:03 +00:00
description: phpMyAdmin panel was detected.
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
Add CPE classification to templates (#9420) * Add CPE classification to templates * misc fix * added tags * format updates * Revert "format updates" This reverts commit b93658be4b50c929d15082258e4d11a15b12cbd8. --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2024-03-26 08:03:04 +00:00
cpe: cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*
Update phpmyadmin-panel.yaml
2022-04-28 19:22:07 +00:00
metadata:
TemplateMan Update [Sat Mar 23 09:28:19 UTC 2024] :robot:
2024-03-23 09:28:19 +00:00
max-request: 13
Add mass vendor and product info to templates
2024-02-22 00:55:04 +00:00
product: phpmyadmin
Add CPE classification to templates (#9420) * Add CPE classification to templates * misc fix * added tags * format updates * Revert "format updates" This reverts commit b93658be4b50c929d15082258e4d11a15b12cbd8. --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2024-03-26 08:03:04 +00:00
shodan-query: http.title:phpMyAdmin
Revert "TemplateMan Update [Mon Apr 8 11:30:07 UTC 2024] :robot:" This reverts commit 433dda4ae5b824564b44075bb95a96ecdbe263a6.
2024-04-08 11:34:33 +00:00
vendor: phpmyadmin
Added technology tags (#3470)
2022-01-03 16:06:23 +00:00
tags: panel,phpmyadmin
Added templates
2020-04-04 18:19:48 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Added templates
2020-04-04 18:19:48 +00:00
- method: GET
path:
feat: convert paths with lots of elements to payloads
2024-04-12 10:31:51 +00:00
- "{{BaseURL}}{{paths}}"
payloads:
paths:
- ""
- "/phpmyadmin/"
- "/admin/phpmyadmin/"
- "/_phpmyadmin/"
- "/administrator/components/com_joommyadmin/phpmyadmin/"
- "/apache-default/phpmyadmin/"
- "/blog/phpmyadmin/"
- "/forum/phpmyadmin/"
- "/php/phpmyadmin/"
- "/typo3/phpmyadmin/"
- "/web/phpmyadmin/"
- "/xampp/phpmyadmin/"
- "/phpMyAdmin/"
Update phpmyadmin-panel.yaml
2021-09-01 18:51:43 +00:00
Update phpmyadmin-panel.yaml Stopping at first match (stop-at-first-match: true) With the id (html) "pmahomme" you will find hidden phpmyadmin instances (status 301) those instances do not show the title. The title can be easily change but id are not that simple to get rid of.
2021-09-01 16:25:12 +00:00
stop-at-first-match: true
Added templates
2020-04-04 18:19:48 +00:00
matchers:
- type: word
words:
Update phpmyadmin-panel.yaml
2021-08-23 08:54:04 +00:00
- "<title>phpMyAdmin"
Update phpmyadmin-panel.yaml Stopping at first match (stop-at-first-match: true) With the id (html) "pmahomme" you will find hidden phpmyadmin instances (status 301) those instances do not show the title. The title can be easily change but id are not that simple to get rid of.
2021-09-01 16:25:12 +00:00
- "pmahomme"
Update phpmyadmin-panel.yaml
2021-09-01 18:51:43 +00:00
Update phpmyadmin-panel.yaml Extractor added to retrieve version. Test nuclei -t nuclei-templates/exposed-panels/phpmyadmin-panel.yaml -u https://mojavedata.gov
2021-06-06 02:22:14 +00:00
extractors:
- type: regex
part: body
group: 1
regex:
updates to the phpmyadmin panel detection script Added another possible path URL for detection phpmyadmin panel and matching condition along with possile title to be detected for confirmation of the exposed phpmyadmin panel.
2021-08-23 07:22:33 +00:00
- 'v=([a-z0-9-._]+)'
Auto Template Signing [Fri Apr 12 10:58:46 UTC 2024] :robot:
2024-04-12 10:58:47 +00:00
# digest: 490a0046304402206d90224ba8f372bdc9b38b257f69f8c77e5c0a914af058f064ba7dd95a08da9102202872893647242184b043cdcc9dd82ea6bfa2165130f30c89737175e8441fe7b0:922c64590222798bb761d5b6d8e72950