Update and rename etherpad-open.yaml to unauth-etherpad.yaml

patch-1
Dhiyaneshwaran 2022-12-01 11:30:13 +05:30 committed by GitHub
parent 34507f10c0
commit 1e3ee33306
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 7 deletions

View File

@ -1,26 +1,30 @@
id: etherpad-open
id: unauth-etherpad
info:
name: Etherpad open instance
name: Unauthenticated Etherpad
author: philippedelteil
description: Finds Etherpad instances that allow adding new notes without authentication
severity: low
description: |
Finds Etherpad instances that allow adding new notes without authentication.
metadata:
- shodan-query: http.html:"index.createOpenPad"
tags: etherpad
verified: true
shodan-query: http.html:"index.createOpenPad"
tags: etherpad,misconfig,unauth
requests:
- method: GET
path:
- "{{BaseURL}}"
- '{{BaseURL}}'
matchers-condition: and
matchers:
- type: word
part: body
words:
- "index.createOpenPad"
- "index.newPad"
condition: and
part: body
- type: status
status:
- 200