nuclei-templates/technologies/microstrategy-detect.yaml

56 lines
1.3 KiB
YAML
Raw Normal View History

2021-10-21 15:10:37 +00:00
id: microstrategy-detect
info:
name: MicroStrategy Instances Detection Template
author: philippedelteil,Retr02332
severity: info
description: Detect if MicroStrategy instances exist in your URLS
2021-10-22 11:10:06 +00:00
tags: microstrategy,panel
2021-10-21 15:10:37 +00:00
requests:
- method: GET
2021-10-22 10:36:36 +00:00
2021-10-21 15:10:37 +00:00
path:
- "{{BaseURL}}/{{path}}"
payloads:
path:
- MicroStrategy/servlet/mstrWebAdmin/
- MicroStrategy/servlet/mstrWebAdmin
- MicroStrategy/servlet/taskProc/
- MicroStrategy/servlet/taskProc
- MicroStrategy/servlet/mstrWeb/
- MicroStrategy/servlet/mstrWeb
- MicroStrategy/
- MicroStrategy
- servlet/mstrWebAdmin/
- servlet/mstrWebAdmin
- servlet/taskProc/
- servlet/taskProc
- servlet/mstrWeb/
- servlet/mstrWeb
- asp/Main.aspx
- MicroStrategy/asp
2021-10-22 10:36:36 +00:00
2021-10-22 17:15:06 +00:00
stop-at-first-match: true
2021-10-22 10:36:36 +00:00
matchers:
- type: dsl
2021-10-22 17:15:06 +00:00
condition: or
2021-10-22 10:36:36 +00:00
dsl:
- 'contains(body, "MicroStrategy, Incorporated.")'
- 'contains(body, "microstrategy.servletName")'
- 'contains(body, "mstrHiddenInput")'
extractors:
- type: regex
part: body
group: 1
regex:
- 'ProductHelp/([0-9.A-Z]+)'
- type: regex
part: body
group: 1
regex:
- 'WELCOME. MicroStrategy ([0-9]+)'