Merge pull request #6081 from sinKettu/more_flexible_tomcat_manager_exposed_panel_template

Tomcat Manager Exposed Panel: more flexible and accurate template
patch-1
Dhiyaneshwaran 2022-12-08 20:16:19 +05:30 committed by GitHub
commit 05c5987edc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 2 deletions

View File

@ -2,7 +2,7 @@ id: tomcat-default-login
info:
name: Apache Tomcat Manager Default Login
author: pdteam
author: pdteam,sinKettu
severity: high
description: Apache Tomcat Manager default login credentials were discovered. This template checks for multiple variations.
reference:
@ -68,9 +68,21 @@ requests:
words:
- "Apache Tomcat"
- "Server Information"
- "Hostname"
condition: and
- type: word
part: body
words:
- "Tomcat Version"
- "JVM Version"
- "JVM Vendor"
- "OS Name"
- "OS Version"
- "OS Architecture"
- "Hostname"
- "IP Address"
condition: or
- type: status
status:
- 200