Create selea-ip-camera.yaml

This only detects the presence of the camera control panel. It's up to the user to verify the "unauthenticated stream disclosure" exists. Please see the URL in the description for details.
patch-1
Geeknik Labs 2021-01-22 16:16:49 +00:00 committed by GitHub
parent 98e97a61cc
commit 26ded33ff7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 25 additions and 0 deletions

View File

@ -0,0 +1,25 @@
id: selea-ip-camera
info:
name: Detect Selea Targa IP OCR-ANPR Camera
author: geeknik
description: Selea Targa IP OCR-ANPR Camera Unauthenticated RTP/RTSP/M-JPEG Stream Disclosure -- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5619.php
severity: info
requests:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
part: header
words:
- "SeleaCPSHttpServer"
- type: word
part: body
words:
- "Selea CarPlateServer"
- type: status
status:
- 200