Create kodbox-installer.yaml

patch-4
Dhiyaneshwaran 2024-06-28 01:49:21 +05:30 committed by GitHub
parent 0ebad553e3
commit 1eccff787d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 34 additions and 0 deletions

View File

@ -0,0 +1,34 @@
id: kodbox-installer
info:
name: Kodbox Installation Page - Exposure
author: DhiyaneshDK
severity: high
description: |
Kodbox is susceptible to the Installation page exposure due to misconfiguration.
metadata:
verified: true
max-request: 1
fofa-query: title="kodbox" && body="install"
tags: misconfig,exposure,install,kodbox
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "Kodbox-Installation"
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200