Create quickcms-installer.yaml

main
Dhiyaneshwaran 2024-07-29 21:45:14 +05:30 committed by GitHub
parent 7cc8762c64
commit 067e84f4ba
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 34 additions and 0 deletions

View File

@ -0,0 +1,34 @@
id: quickcms-installer
info:
name: QuickCMS Installation Wizard
author: DhiyaneshDK
severity: high
description: |
PMM is susceptible to the Installation page exposure due to misconfiguration.
metadata:
verified: true
max-request: 1
shodan-query: html:"QuickCMS Installation"
tags: misconfig,exposure,install,quickcms
http:
- method: GET
path:
- "{{BaseURL}}/install/"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "QuickCMS Installation"
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200