diff --git a/misconfiguration/beego-admin-dashboard.yaml b/misconfiguration/beego-admin-dashboard.yaml new file mode 100644 index 0000000000..476e68648c --- /dev/null +++ b/misconfiguration/beego-admin-dashboard.yaml @@ -0,0 +1,35 @@ +id: beego-admin-dashboard + +info: + name: Beego Admin Dashboard + author: DhiyaneshDk + severity: high + reference: + - https://twitter.com/shaybt12/status/1584112903577567234/photo/1 + metadata: + verified: true + shodan-query: html:"Beego Admin Dashboard" + tags: misconfig,beego,unath + +requests: + - method: GET + path: + - '{{BaseURL}}/listconf?command=conf' + + matchers-condition: and + matchers: + - type: word + part: body + words: + - 'Welcome to Beego Admin Dashboard' + - 'Configurations' + condition: and + + - type: word + part: header + words: + - "text/html" + + - type: status + status: + - 200