daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1071 from meme-lord/master 

Adminer Template update
patch-1
PD-Team 2021-03-15 15:40:13 +05:30 committed by GitHub
parent 298822898a 4de26bb49c
commit 23b24679ac
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 18 additions and 107 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

125
exposed-panels/adminer-panel.yaml
View File

@ -1,121 +1,25 @@
id: adminer-panel id: adminer-panel
info: info:
name: Adminer Login panel name: Adminer Login panel
author: random-robbie author: random-robbie & meme-lord
severity: medium severity: info
reference: https://blog.sorcery.ie/posts/adminer/
# Older versions suffer from LFI but also handy if you find mysql creds # <= 4.2.4 can have unauthenticated RCE via SQLite driver
# <= 4.6.2 can have LFI via MySQL LOAD DATA LOCAL
# Most versions have some kind of SSRF usability
# Is generally handy if you find SQL creds
requests: requests:
- method: GET - method: GET
path: path:
- '{{BaseURL}}/adminer-4.7.0.php'
- '{{BaseURL}}/adminer-4.6.0-mysql-en.php'
- '{{BaseURL}}/adminer/adminer.php'
- '{{BaseURL}}/adminer-4.6.0-en.php'
- '{{BaseURL}}/adminer-4.6.2-mysql.php'
- '{{BaseURL}}/adminer-4.6.1-mysql.php'
- '{{BaseURL}}/adminer-4.7.2.php'
- '{{BaseURL}}/adminer-4.0.1/'
- '{{BaseURL}}/adminer-4.6.3-mysql-en.php'
- '{{BaseURL}}/adminer-4.3.1-mysql-en.php'
- '{{BaseURL}}/adminer-3.3.1/'
- '{{BaseURL}}/adminer-3.6.1/'
- '{{BaseURL}}/adminer-4.6.2.php'
- '{{BaseURL}}/adminer-4.0.3.php'
- '{{BaseURL}}/adminer-4.3.0.php'
- '{{BaseURL}}/adminer-4.6.1.php'
- '{{BaseURL}}/adminer-4.2.5-en.php'
- '{{BaseURL}}/data/adminer.php'
- '{{BaseURL}}/adminer/index.php'
- '{{BaseURL}}/adminer-4.2.0.php'
- '{{BaseURL}}/adminer-4.5.0-mysql.php'
- '{{BaseURL}}/admin/adminer.php'
- '{{BaseURL}}/adminer-4.7.2-mysql.php'
- '{{BaseURL}}/adminer-4.2.2/'
- '{{BaseURL}}/adminer-4.5.0.php'
- '{{BaseURL}}/adminer-3.6.0/'
- '{{BaseURL}}/webadminer.php'
- '{{BaseURL}}/adminer-4.0.3/'
- '{{BaseURL}}/adminer-4.1.0.php'
- '{{BaseURL}}/adminer-3.3.2/'
- '{{BaseURL}}/adminer-4.6.2-en.php'
- '{{BaseURL}}/adminer-4.7.1-mysql.php'
- '{{BaseURL}}/public/adminer.php'
- '{{BaseURL}}/adminer-4.1.0/'
- '{{BaseURL}}/adminer-4.5.0-en.php'
- '{{BaseURL}}/adminer-4.2.4/'
- '{{BaseURL}}/adminer-4.6.2-mysql-en.php'
- '{{BaseURL}}/adminer.php'
- '{{BaseURL}}/adminer-4.7.0-mysql-en.php'
- '{{BaseURL}}/adminer-4.4.0-mysql.php'
- '{{BaseURL}}/adminer-4.3.1.php'
- '{{BaseURL}}/adminer-4.6.0-mysql.php'
- '{{BaseURL}}/adminer-4.2.3/'
- '{{BaseURL}}/_adminer.php' - '{{BaseURL}}/_adminer.php'
- '{{BaseURL}}/adminer-3.3.3/'
- '{{BaseURL}}/adminer-3.3.0/'
- '{{BaseURL}}/php/adminer.php'
- '{{BaseURL}}/adminer-3.1.0/'
- '{{BaseURL}}/adminer-4.6.3-mysql.php'
- '{{BaseURL}}/adminer-4.7.2-mysql-en.php'
- '{{BaseURL}}/adminer-4.4.0-en.php'
- '{{BaseURL}}/publicadminer.php'
- '{{BaseURL}}/adminer1.php'
- '{{BaseURL}}/adminer-4.7.3-mysql.php'
- '{{BaseURL}}/adminer-4.6.3-en.php'
- '{{BaseURL}}/adminer-4.2.5-mysql-en.php'
- '{{BaseURL}}/adminer-3.0.0/'
- '{{BaseURL}}/adminer-3.5.0/'
- '{{BaseURL}}/adminer-3.6.4/'
- '{{BaseURL}}/adminer-4.7.3-mysql-en.php'
- '{{BaseURL}}/adminer-3.2.2/'
- '{{BaseURL}}/adminer-3.0.1/'
- '{{BaseURL}}/tools/adminer.php'
- '{{BaseURL}}/adminer-4.7.1.php'
- '{{BaseURL}}/adminer-4.0.3-mysql.php'
- '{{BaseURL}}/adminer-4.2.5-mysql.php'
- '{{BaseURL}}/adminer-3.5.1/'
- '{{BaseURL}}/adminer-3.6.3/'
- '{{BaseURL}}/adminer-4.3.0-mysql-en.php'
- '{{BaseURL}}/web/adminer.php'
- '{{BaseURL}}/adminer-3.2.1/'
- '{{BaseURL}}/adminer/' - '{{BaseURL}}/adminer/'
- '{{BaseURL}}/adminer-4.6.2-cs.php' - '{{BaseURL}}/adminer.php'
- '{{BaseURL}}/adminer-4.2.0-mysql.php' - '{{BaseURL}}/editor.php'
- '{{BaseURL}}/adminer-4.5.0-mysql-en.php' - '{{BaseURL}}/mysql.php'
- '{{BaseURL}}/adminer-4.3.1-mysql.php' - '{{BaseURL}}/sql.php'
- '{{BaseURL}}/adminer-4.1.0-mysql.php'
- '{{BaseURL}}/adminer-4.7.1-mysql-en.php'
- '{{BaseURL}}/adminer-4.3.1-en.php'
- '{{BaseURL}}/adminer-4.7.0-en.php'
- '{{BaseURL}}/adminer-4.6.1-mysql-en.php'
- '{{BaseURL}}/adminer-4.7.2-en.php'
- '{{BaseURL}}/adminer-4.2.0/'
- '{{BaseURL}}/adminer-3.6.2/'
- '{{BaseURL}}/adminer-4.4.0-mysql-en.php'
- '{{BaseURL}}/toolsadminer.php'
- '{{BaseURL}}/adminer-3.7.0/'
- '{{BaseURL}}/adminer-4.2.5.php'
- '{{BaseURL}}/adminer-3.2.0/'
- '{{BaseURL}}/adminer-4.4.0.php'
- '{{BaseURL}}/adminer-4.7.3.php'
- '{{BaseURL}}/adminer-4.3.0-en.php'
- '{{BaseURL}}/adminer-4.6.3.php'
- '{{BaseURL}}/adminer-4.0.2/'
- '{{BaseURL}}/wp-content/plugins/adminer/adminer.php' - '{{BaseURL}}/wp-content/plugins/adminer/adminer.php'
- '{{BaseURL}}/adminer-3.4.0/'
- '{{BaseURL}}/adminer-4.0.0/'
- '{{BaseURL}}/adminer-4.7.1-en.php'
- '{{BaseURL}}/adminer-4.3.0-mysql.php'
- '{{BaseURL}}/adminer-4.2.1/'
- '{{BaseURL}}/adminer-4.6.0.php'
- '{{BaseURL}}/adminer-3.7.1/'
- '{{BaseURL}}/adminadminer.php'
- '{{BaseURL}}/adminer-3.3.4/'
- '{{BaseURL}}/adminer-4.6.1-en.php'
- '{{BaseURL}}/adminer-4.7.3-en.php'
- '{{BaseURL}}/adminer-4.7.0-mysql.php'
matchers-condition: and matchers-condition: and
matchers: matchers:
@ -127,3 +31,10 @@ requests:
- type: status - type: status
status: status:
- 200 - 200
extractors:
- type: regex
part: body
group: 1
regex:
- '<span class="version">([0-9.]+)'