nuclei-templates/technologies/metabase-detect.yaml

32 lines
713 B
YAML
Raw Normal View History

2021-06-15 09:30:39 +00:00
id: metabase-version-detect
info:
name: Detect Metabase Version
author: revblock
description: If a Metabase instance is deployed on the target URL it will return a login page with the version number in the page source
severity: info
requests:
- method: GET
path:
- "{{BaseURL}}/auth/login"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "<title>Metabase</title>"
- "window.MetabaseBootstrap"
- "window.MetabaseRoot"
2021-06-15 09:46:25 +00:00
part: body
condition: and
2021-06-15 09:30:39 +00:00
extractors:
- type: regex
part: body
group: 1
regex:
2021-06-15 09:46:25 +00:00
- '"(v\d+.\d+.\d+)"'