nuclei-templates/misconfiguration/unauthenticated-influxdb.yaml

27 lines
537 B
YAML
Raw Normal View History

2021-11-13 08:44:06 +00:00
id: unauthenticated-influxdb
2021-11-13 06:56:47 +00:00
info:
name: Unauthentication InfluxDB Detection
author: pussycat0x
2021-11-13 08:44:06 +00:00
severity: high
2021-11-13 06:56:47 +00:00
metadata:
shodan-dork: InfluxDB
2021-11-13 08:44:06 +00:00
tags: unauth,db,influxdb,misconfig
2021-11-13 06:56:47 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}/query?db=db&q=SHOW%20DATABASES"
2021-11-13 08:44:06 +00:00
matchers-condition: and
2021-11-13 06:56:47 +00:00
matchers:
2021-11-13 08:46:19 +00:00
- type: word
2021-11-13 06:56:47 +00:00
part: body
2021-11-13 08:44:06 +00:00
words:
- '"results":'
- '"name":"databases"'
condition: and
2021-11-13 06:56:47 +00:00
- type: status
status:
- 200