nuclei-templates/http/misconfiguration/installer/unifi-wizard-install.yaml

36 lines
652 B
YAML
Raw Normal View History

id: unifi-wizard-install
2022-11-11 01:57:25 +00:00
info:
name: UniFi Wizard Installer
author: DhiyaneshDk
severity: high
metadata:
verified: true
shodan-query: title:"UniFi Wizard"
tags: misconfig,install,unifi,exposure
2022-11-11 01:57:25 +00:00
http:
2022-11-11 01:57:25 +00:00
- method: GET
path:
- "{{BaseURL}}/manage/wizard/"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "UniFi Wizard"
- "app-unifi-wizard"
condition: and
- type: status
status:
- 200
extractors:
- type: regex
part: body
group: 1
regex:
- "window.unifiConfig.version = '(.*)'"