From 1e3ee33306dd8f40afcadf5bdb22578ec8bd4c24 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Thu, 1 Dec 2022 11:30:13 +0530 Subject: [PATCH] Update and rename etherpad-open.yaml to unauth-etherpad.yaml --- ...etherpad-open.yaml => unauth-etherpad.yaml} | 18 +++++++++++------- 1 file changed, 11 insertions(+), 7 deletions(-) rename vulnerabilities/other/{etherpad-open.yaml => unauth-etherpad.yaml} (54%) diff --git a/vulnerabilities/other/etherpad-open.yaml b/vulnerabilities/other/unauth-etherpad.yaml similarity index 54% rename from vulnerabilities/other/etherpad-open.yaml rename to vulnerabilities/other/unauth-etherpad.yaml index 4a460ccbda..a9974b4609 100644 --- a/vulnerabilities/other/etherpad-open.yaml +++ b/vulnerabilities/other/unauth-etherpad.yaml @@ -1,26 +1,30 @@ -id: etherpad-open +id: unauth-etherpad info: - name: Etherpad open instance + name: Unauthenticated Etherpad author: philippedelteil - description: Finds Etherpad instances that allow adding new notes without authentication severity: low + description: | + Finds Etherpad instances that allow adding new notes without authentication. metadata: - - shodan-query: http.html:"index.createOpenPad" - tags: etherpad + verified: true + shodan-query: http.html:"index.createOpenPad" + tags: etherpad,misconfig,unauth requests: - method: GET path: - - "{{BaseURL}}" + - '{{BaseURL}}' + matchers-condition: and matchers: - type: word + part: body words: - "index.createOpenPad" - "index.newPad" condition: and - part: body + - type: status status: - 200