daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/exposed-panels/concrete5/concrete5-panel.yaml

39 lines
853 B
YAML
Raw Normal View History

New Templates & Workflow (#3556) * Create secure-login-panel.yaml * Create geo-webserver.yaml * Create hp-virtual-connect-manager.yaml * Create microsoft-azure-error.yaml * Create microsoft-iis-8.yaml * Create veeam-backup-azure-panel.yaml * Create user-control-panel.yaml * Create kafka-consumer-monitor.yaml * Update kafka-consumer-monitor.yaml * Create kafka-connect-ui-exposure.yaml * misc updates * duplicate template existing one - `exposed-panels/kafka-connect-ui.yaml` * Create kafka-cruise-control.yaml * Create kafka-center-default-login.yaml * Create kafka-center-login.yaml * minor update * Create azure-kubernetes-service.yaml * Update azure-kubernetes-service.yaml * Update azure-kubernetes-service.yaml * Create barracuda-panel.yaml * Update barracuda-panel.yaml * Update barracuda-panel.yaml * Create CVE-2021-24891.yaml * template meta info update * Delete CVE-2021-24891.yaml * Create caddy-open-redirect.yaml * Create concrete5-panel.yaml * Create concrete-workflow.yaml * updated matcher to avoid false negative results * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-01-19 07:51:15 +00:00
id: concrete5-panel
info:
Dashboard Content Enhancements (#6061) Dashboard Content Enhancements
2022-11-15 16:28:37 +00:00
name: Concrete5 Login Panel - Detect
New Templates & Workflow (#3556) * Create secure-login-panel.yaml * Create geo-webserver.yaml * Create hp-virtual-connect-manager.yaml * Create microsoft-azure-error.yaml * Create microsoft-iis-8.yaml * Create veeam-backup-azure-panel.yaml * Create user-control-panel.yaml * Create kafka-consumer-monitor.yaml * Update kafka-consumer-monitor.yaml * Create kafka-connect-ui-exposure.yaml * misc updates * duplicate template existing one - `exposed-panels/kafka-connect-ui.yaml` * Create kafka-cruise-control.yaml * Create kafka-center-default-login.yaml * Create kafka-center-login.yaml * minor update * Create azure-kubernetes-service.yaml * Update azure-kubernetes-service.yaml * Update azure-kubernetes-service.yaml * Create barracuda-panel.yaml * Update barracuda-panel.yaml * Update barracuda-panel.yaml * Create CVE-2021-24891.yaml * template meta info update * Delete CVE-2021-24891.yaml * Create caddy-open-redirect.yaml * Create concrete5-panel.yaml * Create concrete-workflow.yaml * updated matcher to avoid false negative results * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-01-19 07:51:15 +00:00
author: dhiyaneshDk
severity: info
Dashboard Content Enhancements (#6061) Dashboard Content Enhancements
2022-11-15 16:28:37 +00:00
description: Concrete5 login panel was detected.
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0.0
cwe-id: CWE-200
New Templates & Workflow (#3556) * Create secure-login-panel.yaml * Create geo-webserver.yaml * Create hp-virtual-connect-manager.yaml * Create microsoft-azure-error.yaml * Create microsoft-iis-8.yaml * Create veeam-backup-azure-panel.yaml * Create user-control-panel.yaml * Create kafka-consumer-monitor.yaml * Update kafka-consumer-monitor.yaml * Create kafka-connect-ui-exposure.yaml * misc updates * duplicate template existing one - `exposed-panels/kafka-connect-ui.yaml` * Create kafka-cruise-control.yaml * Create kafka-center-default-login.yaml * Create kafka-center-login.yaml * minor update * Create azure-kubernetes-service.yaml * Update azure-kubernetes-service.yaml * Update azure-kubernetes-service.yaml * Create barracuda-panel.yaml * Update barracuda-panel.yaml * Update barracuda-panel.yaml * Create CVE-2021-24891.yaml * template meta info update * Delete CVE-2021-24891.yaml * Create caddy-open-redirect.yaml * Create concrete5-panel.yaml * Create concrete-workflow.yaml * updated matcher to avoid false negative results * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-01-19 07:51:15 +00:00
metadata:
Added max request counter of each template
2023-04-28 08:11:21 +00:00
max-request: 1
New Templates & Workflow (#3556) * Create secure-login-panel.yaml * Create geo-webserver.yaml * Create hp-virtual-connect-manager.yaml * Create microsoft-azure-error.yaml * Create microsoft-iis-8.yaml * Create veeam-backup-azure-panel.yaml * Create user-control-panel.yaml * Create kafka-consumer-monitor.yaml * Update kafka-consumer-monitor.yaml * Create kafka-connect-ui-exposure.yaml * misc updates * duplicate template existing one - `exposed-panels/kafka-connect-ui.yaml` * Create kafka-cruise-control.yaml * Create kafka-center-default-login.yaml * Create kafka-center-login.yaml * minor update * Create azure-kubernetes-service.yaml * Update azure-kubernetes-service.yaml * Update azure-kubernetes-service.yaml * Create barracuda-panel.yaml * Update barracuda-panel.yaml * Update barracuda-panel.yaml * Create CVE-2021-24891.yaml * template meta info update * Delete CVE-2021-24891.yaml * Create caddy-open-redirect.yaml * Create concrete5-panel.yaml * Create concrete-workflow.yaml * updated matcher to avoid false negative results * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-01-19 07:51:15 +00:00
shodan-query: http.title:"concrete5"
Update concrete5-panel.yaml
2022-01-19 08:30:34 +00:00
tags: panel,concrete5,cms
New Templates & Workflow (#3556) * Create secure-login-panel.yaml * Create geo-webserver.yaml * Create hp-virtual-connect-manager.yaml * Create microsoft-azure-error.yaml * Create microsoft-iis-8.yaml * Create veeam-backup-azure-panel.yaml * Create user-control-panel.yaml * Create kafka-consumer-monitor.yaml * Update kafka-consumer-monitor.yaml * Create kafka-connect-ui-exposure.yaml * misc updates * duplicate template existing one - `exposed-panels/kafka-connect-ui.yaml` * Create kafka-cruise-control.yaml * Create kafka-center-default-login.yaml * Create kafka-center-login.yaml * minor update * Create azure-kubernetes-service.yaml * Update azure-kubernetes-service.yaml * Update azure-kubernetes-service.yaml * Create barracuda-panel.yaml * Update barracuda-panel.yaml * Update barracuda-panel.yaml * Create CVE-2021-24891.yaml * template meta info update * Delete CVE-2021-24891.yaml * Create caddy-open-redirect.yaml * Create concrete5-panel.yaml * Create concrete-workflow.yaml * updated matcher to avoid false negative results * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-01-19 07:51:15 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
New Templates & Workflow (#3556) * Create secure-login-panel.yaml * Create geo-webserver.yaml * Create hp-virtual-connect-manager.yaml * Create microsoft-azure-error.yaml * Create microsoft-iis-8.yaml * Create veeam-backup-azure-panel.yaml * Create user-control-panel.yaml * Create kafka-consumer-monitor.yaml * Update kafka-consumer-monitor.yaml * Create kafka-connect-ui-exposure.yaml * misc updates * duplicate template existing one - `exposed-panels/kafka-connect-ui.yaml` * Create kafka-cruise-control.yaml * Create kafka-center-default-login.yaml * Create kafka-center-login.yaml * minor update * Create azure-kubernetes-service.yaml * Update azure-kubernetes-service.yaml * Update azure-kubernetes-service.yaml * Create barracuda-panel.yaml * Update barracuda-panel.yaml * Update barracuda-panel.yaml * Create CVE-2021-24891.yaml * template meta info update * Delete CVE-2021-24891.yaml * Create caddy-open-redirect.yaml * Create concrete5-panel.yaml * Create concrete-workflow.yaml * updated matcher to avoid false negative results * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-01-19 07:51:15 +00:00
- method: GET
path:
- '{{BaseURL}}/index.php/login'
Using "host-redirects" instead of "redirects" to avoid scanning 3rd party / out of scope hosts. (#5491)
2022-10-07 21:27:25 +00:00
host-redirects: true
New Templates & Workflow (#3556) * Create secure-login-panel.yaml * Create geo-webserver.yaml * Create hp-virtual-connect-manager.yaml * Create microsoft-azure-error.yaml * Create microsoft-iis-8.yaml * Create veeam-backup-azure-panel.yaml * Create user-control-panel.yaml * Create kafka-consumer-monitor.yaml * Update kafka-consumer-monitor.yaml * Create kafka-connect-ui-exposure.yaml * misc updates * duplicate template existing one - `exposed-panels/kafka-connect-ui.yaml` * Create kafka-cruise-control.yaml * Create kafka-center-default-login.yaml * Create kafka-center-login.yaml * minor update * Create azure-kubernetes-service.yaml * Update azure-kubernetes-service.yaml * Update azure-kubernetes-service.yaml * Create barracuda-panel.yaml * Update barracuda-panel.yaml * Update barracuda-panel.yaml * Create CVE-2021-24891.yaml * template meta info update * Delete CVE-2021-24891.yaml * Create caddy-open-redirect.yaml * Create concrete5-panel.yaml * Create concrete-workflow.yaml * updated matcher to avoid false negative results * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-01-19 07:51:15 +00:00
max-redirects: 2
matchers:
Update concrete5-panel.yaml
2022-01-19 08:30:34 +00:00
- type: regex
part: body
regex:
case-insensitive matcher
2022-01-19 10:04:53 +00:00
- '(?mi)<title>(.*)concrete5(.*)<\/title>'
- '(?mi)content="concrete5 - (.*)'
Update concrete5-panel.yaml
2022-01-19 08:30:34 +00:00
condition: or
extractors:
- type: regex
part: body
group: 1
regex:
- 'content="concrete5 \- ([0-9.]+)"\/>'
- 'Version ([0-9.]+)'