nuclei-templates/exposed-panels/redis-commander-exposure.yaml

id: redis-commander-exposure

info:
  name: Redis Commander Exposure
  author: dahse89
  severity: low
  reference:
    - https://joeferner.github.io/redis-commander/
    - https://github.com/joeferner/redis-commander
  tags: panel,redis

requests:
  - method: GET
    path:
      - '{{BaseURL}}'

    matchers:
      - type: word
        condition: and
        words:
          - "<title>Redis Commander"
          - "redisCommanderBearerToken"
Add Redis Commander Panel Detection Redis Commander is a common ui for redis. Access to Redis Commander can allow access to redis and expose sensible session or cache data. 2021-10-25 13:45:49 +00:00			`id: redis-commander-exposure`

			`info:`
			`name: Redis Commander Exposure`
			`author: dahse89`
			`severity: low`
			`reference:`
			`- https://joeferner.github.io/redis-commander/`
			`- https://github.com/joeferner/redis-commander`
Update redis-commander-exposure.yaml 2021-10-26 09:47:36 +00:00			`tags: panel,redis`
Add Redis Commander Panel Detection Redis Commander is a common ui for redis. Access to Redis Commander can allow access to redis and expose sensible session or cache data. 2021-10-25 13:45:49 +00:00
			`requests:`
			`- method: GET`
			`path:`
			`- '{{BaseURL}}'`

			`matchers:`
			`- type: word`
Update redis-commander-exposure.yaml 2021-10-26 09:47:36 +00:00			`condition: and`
Add Redis Commander Panel Detection Redis Commander is a common ui for redis. Access to Redis Commander can allow access to redis and expose sensible session or cache data. 2021-10-25 13:45:49 +00:00			`words:`
			`- "<title>Redis Commander"`
			`- "redisCommanderBearerToken"`