2021-02-23 09:06:43 +00:00
|
|
|
id: awstats-script
|
|
|
|
|
|
|
|
info:
|
2023-02-05 18:01:53 +00:00
|
|
|
name: AWStats Script Config - Detect
|
2021-02-23 09:06:43 +00:00
|
|
|
author: sheikhrishad
|
|
|
|
severity: info
|
2023-02-05 21:43:40 +00:00
|
|
|
description: AWStats configuration information was detected.
|
2023-02-05 16:42:21 +00:00
|
|
|
reference: https://www.awstats.org/docs/awstats_setup.html
|
|
|
|
classification:
|
|
|
|
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
|
|
|
|
cvss-score: 0.0
|
|
|
|
cwe-id: CWE-200
|
2022-01-21 09:54:20 +00:00
|
|
|
tags: config,exposure,awstats
|
2021-02-23 09:06:43 +00:00
|
|
|
|
|
|
|
requests:
|
|
|
|
- method: GET
|
|
|
|
path:
|
|
|
|
- "{{BaseURL}}/awstats.pl"
|
|
|
|
- "{{BaseURL}}/logs/awstats.pl"
|
|
|
|
- "{{BaseURL}}/webstats/awstats.pl"
|
|
|
|
|
|
|
|
matchers-condition: and
|
|
|
|
matchers:
|
|
|
|
- type: word
|
|
|
|
words:
|
|
|
|
- "Do not remove this line"
|
|
|
|
|
|
|
|
- type: word
|
2022-01-21 09:54:20 +00:00
|
|
|
part: header
|
2021-02-23 09:06:43 +00:00
|
|
|
words:
|
|
|
|
- "application/x-perl"
|
|
|
|
|
|
|
|
- type: status
|
|
|
|
status:
|
2023-02-05 16:42:21 +00:00
|
|
|
- 200
|
|
|
|
|
|
|
|
# Enhanced by mp on 2023/02/05
|