nuclei-templates/misconfiguration/aem/aem-wcm-suggestions-servlet...

30 lines
687 B
YAML
Raw Normal View History

id: aem-wcm-suggestions-servlet
info:
name: AEM WCM Suggestions Servlet
author: DhiyaneshDk
severity: low
reference:
- https://speakerdeck.com/0ang3el/hunting-for-security-bugs-in-aem-webapps?slide=96
metadata:
shodan-query: http.component:"Adobe Experience Manager"
tags: aem
requests:
- method: GET
path:
2021-04-13 19:54:00 +00:00
- '{{BaseURL}}/bin/wcm/contentfinder/connector/suggestions.json;%0aOJh.css?query_term=path%3a/&pre={{randstr}}'
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
2021-04-13 19:54:00 +00:00
- '{{randstr}}'
2021-05-05 12:09:31 +00:00
- '"results":'
- '"suggestions":'
condition: and