daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/iot/selea-ip-camera.yaml

39 lines
992 B
YAML
Raw Normal View History

Create selea-ip-camera.yaml This only detects the presence of the camera control panel. It's up to the user to verify the "unauthenticated stream disclosure" exists. Please see the URL in the description for details.
2021-01-22 16:16:49 +00:00
id: selea-ip-camera
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
Create selea-ip-camera.yaml This only detects the presence of the camera control panel. It's up to the user to verify the "unauthenticated stream disclosure" exists. Please see the URL in the description for details.
2021-01-22 16:16:49 +00:00
info:
name: Detect Selea Targa IP OCR-ANPR Camera
author: geeknik
severity: info
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
description: Various version of the Selea Targa IP OCR-ANPR Camera are vulnerable to an Unauthenticated RTP/RTSP/M-JPEG Stream Disclosure flaw
reference:
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5619.php
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 1
templateman update
2023-10-14 11:27:55 +00:00
tags: iot,selea,targa
Create selea-ip-camera.yaml This only detects the presence of the camera control panel. It's up to the user to verify the "unauthenticated stream disclosure" exists. Please see the URL in the description for details.
2021-01-22 16:16:49 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Create selea-ip-camera.yaml This only detects the presence of the camera control panel. It's up to the user to verify the "unauthenticated stream disclosure" exists. Please see the URL in the description for details.
2021-01-22 16:16:49 +00:00
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
part: header
words:
- "SeleaCPSHttpServer"
Update selea-ip-camera.yaml
2021-07-15 03:24:13 +00:00
- "selea_httpd"
- "HttpServer/0.1"
condition: or
templateman update
2023-10-14 11:27:55 +00:00
Create selea-ip-camera.yaml This only detects the presence of the camera control panel. It's up to the user to verify the "unauthenticated stream disclosure" exists. Please see the URL in the description for details.
2021-01-22 16:16:49 +00:00
- type: word
part: body
words:
- "Selea CarPlateServer"
templateman update
2023-10-14 11:27:55 +00:00
Create selea-ip-camera.yaml This only detects the presence of the camera control panel. It's up to the user to verify the "unauthenticated stream disclosure" exists. Please see the URL in the description for details.
2021-01-22 16:16:49 +00:00
- type: status
status:
- 200
TemplateMan Update [Fri Oct 20 11:41:12 UTC 2023] :robot:
2023-10-20 11:41:13 +00:00
# digest: 4a0a00473045022100cbf9675652c2ae514b692b59ed27ec7d1283b1b8ddd78faf4ab9d983cc9e9bef02207c8a18074e63e31aface7d850dc9dfcb7f251e909b555a46bb4bb62696e1be10:922c64590222798bb761d5b6d8e72950