nuclei-templates/exposures/files/redmine-config.yaml

50 lines
1.1 KiB
YAML
Raw Normal View History

2022-07-04 20:28:04 +00:00
id: redmine-config
2022-08-22 07:17:05 +00:00
2022-07-04 20:28:04 +00:00
info:
name: Redmine Configuration File - Detect
2022-07-04 20:28:04 +00:00
author: DhiyaneshDK
severity: high
description: Redmine configuration file was detected.
2022-07-05 03:55:35 +00:00
reference:
- https://www.exploit-db.com/ghdb/5803
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cwe-id: CWE-200
2022-07-04 20:28:04 +00:00
metadata:
2022-07-05 03:55:35 +00:00
verified: true
google-query: intitle:"index of" configuration.yml
2022-10-13 10:12:07 +00:00
tags: exposure,redmine,devops,edb,files
2022-07-04 20:28:04 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}/configuration.yml"
- "{{BaseURL}}/config/configuration.yml"
- "{{BaseURL}}/redmine/config/configuration.yml"
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
2022-07-05 03:55:35 +00:00
part: body
words:
- "user_name"
- "password"
- "Redmine"
condition: and
- type: word
part: header
2022-07-04 20:28:04 +00:00
words:
2022-07-05 03:55:35 +00:00
- "application/json"
- "text/html"
negative: true
condition: and
2022-07-04 20:28:04 +00:00
- type: status
status:
- 200
# Enhanced by md on 2023/03/07