PD-Team
GitHub
commit
23b24679ac
|
|
@ -1,121 +1,25 @@
|
|||
id: adminer-panel
|
||||
info:
|
||||
name: Adminer Login panel
|
||||
author: random-robbie
|
||||
severity: medium
|
||||
author: random-robbie & meme-lord
|
||||
severity: info
|
||||
reference: https://blog.sorcery.ie/posts/adminer/
|
||||
|
||||
# Older versions suffer from LFI but also handy if you find mysql creds
|
||||
# <= 4.2.4 can have unauthenticated RCE via SQLite driver
|
||||
# <= 4.6.2 can have LFI via MySQL LOAD DATA LOCAL
|
||||
# Most versions have some kind of SSRF usability
|
||||
# Is generally handy if you find SQL creds
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- '{{BaseURL}}/adminer-4.7.0.php'
|
||||
- '{{BaseURL}}/adminer-4.6.0-mysql-en.php'
|
||||
- '{{BaseURL}}/adminer/adminer.php'
|
||||
- '{{BaseURL}}/adminer-4.6.0-en.php'
|
||||
- '{{BaseURL}}/adminer-4.6.2-mysql.php'
|
||||
- '{{BaseURL}}/adminer-4.6.1-mysql.php'
|
||||
- '{{BaseURL}}/adminer-4.7.2.php'
|
||||
- '{{BaseURL}}/adminer-4.0.1/'
|
||||
- '{{BaseURL}}/adminer-4.6.3-mysql-en.php'
|
||||
- '{{BaseURL}}/adminer-4.3.1-mysql-en.php'
|
||||
- '{{BaseURL}}/adminer-3.3.1/'
|
||||
- '{{BaseURL}}/adminer-3.6.1/'
|
||||
- '{{BaseURL}}/adminer-4.6.2.php'
|
||||
- '{{BaseURL}}/adminer-4.0.3.php'
|
||||
- '{{BaseURL}}/adminer-4.3.0.php'
|
||||
- '{{BaseURL}}/adminer-4.6.1.php'
|
||||
- '{{BaseURL}}/adminer-4.2.5-en.php'
|
||||
- '{{BaseURL}}/data/adminer.php'
|
||||
- '{{BaseURL}}/adminer/index.php'
|
||||
- '{{BaseURL}}/adminer-4.2.0.php'
|
||||
- '{{BaseURL}}/adminer-4.5.0-mysql.php'
|
||||
- '{{BaseURL}}/admin/adminer.php'
|
||||
- '{{BaseURL}}/adminer-4.7.2-mysql.php'
|
||||
- '{{BaseURL}}/adminer-4.2.2/'
|
||||
- '{{BaseURL}}/adminer-4.5.0.php'
|
||||
- '{{BaseURL}}/adminer-3.6.0/'
|
||||
- '{{BaseURL}}/webadminer.php'
|
||||
- '{{BaseURL}}/adminer-4.0.3/'
|
||||
- '{{BaseURL}}/adminer-4.1.0.php'
|
||||
- '{{BaseURL}}/adminer-3.3.2/'
|
||||
- '{{BaseURL}}/adminer-4.6.2-en.php'
|
||||
- '{{BaseURL}}/adminer-4.7.1-mysql.php'
|
||||
- '{{BaseURL}}/public/adminer.php'
|
||||
- '{{BaseURL}}/adminer-4.1.0/'
|
||||
- '{{BaseURL}}/adminer-4.5.0-en.php'
|
||||
- '{{BaseURL}}/adminer-4.2.4/'
|
||||
- '{{BaseURL}}/adminer-4.6.2-mysql-en.php'
|
||||
- '{{BaseURL}}/adminer.php'
|
||||
- '{{BaseURL}}/adminer-4.7.0-mysql-en.php'
|
||||
- '{{BaseURL}}/adminer-4.4.0-mysql.php'
|
||||
- '{{BaseURL}}/adminer-4.3.1.php'
|
||||
- '{{BaseURL}}/adminer-4.6.0-mysql.php'
|
||||
- '{{BaseURL}}/adminer-4.2.3/'
|
||||
- '{{BaseURL}}/_adminer.php'
|
||||
- '{{BaseURL}}/adminer-3.3.3/'
|
||||
- '{{BaseURL}}/adminer-3.3.0/'
|
||||
- '{{BaseURL}}/php/adminer.php'
|
||||
- '{{BaseURL}}/adminer-3.1.0/'
|
||||
- '{{BaseURL}}/adminer-4.6.3-mysql.php'
|
||||
- '{{BaseURL}}/adminer-4.7.2-mysql-en.php'
|
||||
- '{{BaseURL}}/adminer-4.4.0-en.php'
|
||||
- '{{BaseURL}}/publicadminer.php'
|
||||
- '{{BaseURL}}/adminer1.php'
|
||||
- '{{BaseURL}}/adminer-4.7.3-mysql.php'
|
||||
- '{{BaseURL}}/adminer-4.6.3-en.php'
|
||||
- '{{BaseURL}}/adminer-4.2.5-mysql-en.php'
|
||||
- '{{BaseURL}}/adminer-3.0.0/'
|
||||
- '{{BaseURL}}/adminer-3.5.0/'
|
||||
- '{{BaseURL}}/adminer-3.6.4/'
|
||||
- '{{BaseURL}}/adminer-4.7.3-mysql-en.php'
|
||||
- '{{BaseURL}}/adminer-3.2.2/'
|
||||
- '{{BaseURL}}/adminer-3.0.1/'
|
||||
- '{{BaseURL}}/tools/adminer.php'
|
||||
- '{{BaseURL}}/adminer-4.7.1.php'
|
||||
- '{{BaseURL}}/adminer-4.0.3-mysql.php'
|
||||
- '{{BaseURL}}/adminer-4.2.5-mysql.php'
|
||||
- '{{BaseURL}}/adminer-3.5.1/'
|
||||
- '{{BaseURL}}/adminer-3.6.3/'
|
||||
- '{{BaseURL}}/adminer-4.3.0-mysql-en.php'
|
||||
- '{{BaseURL}}/web/adminer.php'
|
||||
- '{{BaseURL}}/adminer-3.2.1/'
|
||||
- '{{BaseURL}}/adminer/'
|
||||
- '{{BaseURL}}/adminer-4.6.2-cs.php'
|
||||
- '{{BaseURL}}/adminer-4.2.0-mysql.php'
|
||||
- '{{BaseURL}}/adminer-4.5.0-mysql-en.php'
|
||||
- '{{BaseURL}}/adminer-4.3.1-mysql.php'
|
||||
- '{{BaseURL}}/adminer-4.1.0-mysql.php'
|
||||
- '{{BaseURL}}/adminer-4.7.1-mysql-en.php'
|
||||
- '{{BaseURL}}/adminer-4.3.1-en.php'
|
||||
- '{{BaseURL}}/adminer-4.7.0-en.php'
|
||||
- '{{BaseURL}}/adminer-4.6.1-mysql-en.php'
|
||||
- '{{BaseURL}}/adminer-4.7.2-en.php'
|
||||
- '{{BaseURL}}/adminer-4.2.0/'
|
||||
- '{{BaseURL}}/adminer-3.6.2/'
|
||||
- '{{BaseURL}}/adminer-4.4.0-mysql-en.php'
|
||||
- '{{BaseURL}}/toolsadminer.php'
|
||||
- '{{BaseURL}}/adminer-3.7.0/'
|
||||
- '{{BaseURL}}/adminer-4.2.5.php'
|
||||
- '{{BaseURL}}/adminer-3.2.0/'
|
||||
- '{{BaseURL}}/adminer-4.4.0.php'
|
||||
- '{{BaseURL}}/adminer-4.7.3.php'
|
||||
- '{{BaseURL}}/adminer-4.3.0-en.php'
|
||||
- '{{BaseURL}}/adminer-4.6.3.php'
|
||||
- '{{BaseURL}}/adminer-4.0.2/'
|
||||
- '{{BaseURL}}/adminer.php'
|
||||
- '{{BaseURL}}/editor.php'
|
||||
- '{{BaseURL}}/mysql.php'
|
||||
- '{{BaseURL}}/sql.php'
|
||||
- '{{BaseURL}}/wp-content/plugins/adminer/adminer.php'
|
||||
- '{{BaseURL}}/adminer-3.4.0/'
|
||||
- '{{BaseURL}}/adminer-4.0.0/'
|
||||
- '{{BaseURL}}/adminer-4.7.1-en.php'
|
||||
- '{{BaseURL}}/adminer-4.3.0-mysql.php'
|
||||
- '{{BaseURL}}/adminer-4.2.1/'
|
||||
- '{{BaseURL}}/adminer-4.6.0.php'
|
||||
- '{{BaseURL}}/adminer-3.7.1/'
|
||||
- '{{BaseURL}}/adminadminer.php'
|
||||
- '{{BaseURL}}/adminer-3.3.4/'
|
||||
- '{{BaseURL}}/adminer-4.6.1-en.php'
|
||||
- '{{BaseURL}}/adminer-4.7.3-en.php'
|
||||
- '{{BaseURL}}/adminer-4.7.0-mysql.php'
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
|
|
@ -127,3 +31,10 @@ requests:
|
|||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
||||
extractors:
|
||||
- type: regex
|
||||
part: body
|
||||
group: 1
|
||||
regex:
|
||||
- '<span class="version">([0-9.]+)'
|
||||
Loading…
Reference in New Issue