updated matcher, added desc. & ref.

patch-1
Ritik Chaddha 2023-02-16 13:55:00 +05:30 committed by GitHub
parent 83093c60a9
commit 0fbc5c444a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 11 deletions

View File

@ -1,15 +1,17 @@
id: dozzle-container-logs id: dozzle-container-logs
info: info:
name: Dozzle container logs name: Dozzle - Logs Exposure
author: theabhinavgaur author: theabhinavgaur
severity: medium severity: medium
description: Dozzle is a small lightweight application with a web based interface to monitor Docker logs. It doesnt store any log files. It is for live monitoring of your container logs only.
reference:
- https://github.com/amir20/dozzle
- https://dozzle.dev/
metadata: metadata:
verified: true verified: true
shodan-query: shodan-query: http.title:"Dozzle"
- http.title:"Dozzle" tags: exposure,logs,dozzle,docker
tags: information-disclsoure,logs,docker
requests: requests:
- method: GET - method: GET
@ -22,14 +24,9 @@ requests:
part: body part: body
words: words:
- '"authorizationNeeded": "false"' - '"authorizationNeeded": "false"'
- '"secured": "false"' - 'Dozzle'
condition: and condition: and
- type: word
part: content_type
words:
- 'text/html'
- type: status - type: status
status: status:
- 200 - 200