2021-10-03 11:19:06 +00:00
|
|
|
id: ibm-friendly-path-exposure
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: IBM Websphere Friendly Path Exposure
|
|
|
|
|
author: clarkvoss
|
|
|
|
|
severity: medium
|
|
|
|
|
description: Finds friendly path exposed that can be used to access signup page and create new user accounts.
|
2022-04-22 10:38:41 +00:00
|
|
|
reference:
|
|
|
|
|
- https://clarkvoss.medium.com/how-to-harpon-big-blue-c163722638d8
|
2022-07-04 13:17:57 +00:00
|
|
|
metadata:
|
2023-04-28 08:11:21 +00:00
|
|
|
max-request: 5
|
2022-07-04 13:17:57 +00:00
|
|
|
shodan-query: http.html:"IBM WebSphere Portal"
|
2024-09-10 08:22:50 +00:00
|
|
|
product: websphere_portal
|
|
|
|
|
vendor: ibm
|
2023-06-30 22:40:59 +00:00
|
|
|
tags: ibm,exposure,websphere,misconfig
|
2021-10-03 11:19:06 +00:00
|
|
|
|
2024-09-10 08:22:50 +00:00
|
|
|
classification:
|
|
|
|
|
cpe: cpe:2.3:a:ibm:websphere_portal:*:*:*:*:*:*:*:*
|
2023-04-27 04:28:59 +00:00
|
|
|
http:
|
2021-10-03 11:19:06 +00:00
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- "{{BaseURL}}/wps/portal/client/welcome/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziHd3DQgMNnM3N_M1DjA08PX0NgoNcnQwt3Ez1wwkpiAJKG-AAjgb6BbmhigBypoQ7/dz/d5/L2dBISEvZ0FBIS9nQSEh/?uri=nm:oid:Z6_00000000000000A0BR2B300GG2"
|
|
|
|
|
- "{{BaseURL}}/wps/portal/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziHd3DQgMNnM3N_M1DjA08PX0NgoNcnQwt3Ez1wwkpiAJKG-AAjgb6BbmhigBypoQ7/dz/d5/L2dBISEvZ0FBIS9nQSEh/?uri=nm:oid:Z6_00000000000000A0BR2B300GG2"
|
|
|
|
|
- "{{BaseURL}}/wps/portal/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziDVCAo4FTkJGTsYGBu7uRfjhYgaN7WGiggbO5mb95iLGBp6evQXCQq5OhhZupfhSGfmSToPrxWEBQfxRYSYCHh5mHoYWBj7-RL1DC1y3M2NXCx9jA3RiqAI8ZBbmhEQaZjooABQv7ag!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/dz/d5/L0lJSkdKSUtVSklKQ2dwUkNncFJBL29Od3dBQUFZUUFBRUl3UWxDVTVBQUdNSUtTcEtGTFJ0R0ZvIS80TmxFTklVTVFuRmR1WXBNaFFUVWs1Q2ltcHBBL1o2XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwR1YwL1o3XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwSU8wL25vcm1hbC9PQ04vWjZfMDAwMDAwMDAwMDAwMDBBMEJSMkIzMDBHRzIvYW8vdGht/#Z7_00000000000000A0BR2B300IO0"
|
|
|
|
|
- "{{BaseURL}}/wps/portal/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziDVCAo4FTkJGTsYGBu7uRfjhYgaN7WGiggbO5mb95iLGBp6evQXCQq5OhhZupfhSGfmSToPrxWEBAf0FuaCgAb7VcBA!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/dz/d5/L0lJSkdKSUtVSklKQ2dwUkNncFJBL29Od3dBQUFZUUFBRUl3UWxDVTVBQUdNSUtTcEtGTFJ0R0ZvIS80TmxFTklVTVFuRmR1WXBNaFFUVWs1Q2ltcHBBL1o2XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwR1YwL1o3XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwSU8wL25vcm1hbC9PQ04vWjZfMDAwMDAwMDAwMDAwMDBBMEJSMkIzMDBHRzIvYW8vdGht/#Z7_00000000000000A0BR2B300IO0"
|
|
|
|
|
- "{{BaseURL}}/wps/portal/!ut/p/z1/pZHBDoIwDIYfqZVF4DoIEg5KBEHWi9mBIAnbjCEefHqH8SARJNGe2qRf_78tEFRAWt7aRvat0bKztSD3hKPgGGROwBDjEuH4bOBxWewx9NzUOzBMki3mWRSs_M0a6IN_n_Ti5wRiZ4Kf0J9r8PEXfmTwL_0Sl_YXlvfm-CRFKLS5KvuJHAgoDXeL9wKSBkR_VkPa6QZEra1N-rrJcKglqxdV2KjuEVM-czP-AKyJL-g!/dz/d5/L2dBISEvZ0FBIS9nQSEh/#Z7_00000000000000A0BR2B300IO0"
|
|
|
|
|
|
|
|
|
|
stop-at-first-match: true
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-10-03 11:19:06 +00:00
|
|
|
matchers-condition: and
|
|
|
|
|
matchers:
|
|
|
|
|
- type: word
|
|
|
|
|
words:
|
|
|
|
|
- "Friendly path"
|
|
|
|
|
- "IBM WebSphere Portal"
|
|
|
|
|
part: body
|
|
|
|
|
|
|
|
|
|
- type: word
|
|
|
|
|
words:
|
|
|
|
|
- "text/html"
|
|
|
|
|
part: header
|
|
|
|
|
|
|
|
|
|
- type: status
|
|
|
|
|
status:
|
2022-01-04 19:34:16 +00:00
|
|
|
- 200
|
2024-01-26 15:45:40 +00:00
|
|
|
|
2024-01-23 13:49:12 +00:00
|
|
|
- type: regex
|
|
|
|
|
part: header
|
|
|
|
|
regex:
|
|
|
|
|
- "Content-Location: .+"
|
|
|
|
|
negative: true
|
2024-09-10 08:22:50 +00:00
|
|
|
# digest: 490a0046304402201c5eb880703621112635885e53f9cfafcbb265895a9e6e3e0566c4145a9219460220209f7384c05171450191229a29dea42cff94633d4cf821765179db3bed060082:922c64590222798bb761d5b6d8e72950
|
