2024-04-08 08:13:43 +00:00
|
|
|
id: thanos-prometheus-exposure
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: Thanos Prometheus Setup - Exposure
|
2024-11-01 20:54:49 +00:00
|
|
|
author: DhiyaneshDk,righettod
|
2024-04-08 08:13:43 +00:00
|
|
|
severity: high
|
2024-11-01 20:54:49 +00:00
|
|
|
description: |
|
|
|
|
|
Thanos graph endpoint was detected.
|
|
|
|
|
reference:
|
|
|
|
|
- https://thanos.io/
|
|
|
|
|
- https://github.com/thanos-io/thanos
|
2024-04-08 08:13:43 +00:00
|
|
|
metadata:
|
|
|
|
|
verified: true
|
2024-11-01 20:54:49 +00:00
|
|
|
max-request: 2
|
2024-04-08 08:13:43 +00:00
|
|
|
shodan-query: title:"Thanos | Highly available Prometheus setup"
|
|
|
|
|
fofa-query: icon_hash="29632872"
|
2024-06-07 10:04:29 +00:00
|
|
|
tags: thanos,prometheus,exposure,setup,misconfig
|
2024-04-08 08:13:43 +00:00
|
|
|
|
|
|
|
|
http:
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- "{{BaseURL}}/graph"
|
2024-11-01 20:54:49 +00:00
|
|
|
- "{{BaseURL}}/classic/graph"
|
2024-04-08 08:16:14 +00:00
|
|
|
|
2024-11-01 20:54:49 +00:00
|
|
|
stop-at-first-match: true
|
2024-04-08 08:13:43 +00:00
|
|
|
matchers:
|
2024-11-01 20:54:49 +00:00
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
|
|
|
|
- 'status_code == 200'
|
|
|
|
|
- 'contains_all(body, "THANOS_COMPONENT", "THANOS_QUERY_URL") || contains_all(body, "<title>Thanos", "href=\"/classic/\">Thanos</a>")'
|
2024-04-08 08:13:43 +00:00
|
|
|
condition: and
|
2024-11-01 20:55:32 +00:00
|
|
|
|
|
|
|
|
# digest: 490a00463044022057013fad5ae2bdbe37a273761b91092987215e2a29d9fe9ab4af0417013c35be022041ebcf098c23f15bf1174781c63559747395ee9fc7a6d4df42d4f3095551cddf:922c64590222798bb761d5b6d8e72950
|
