Merge pull request #10152 from projectdiscovery/seq-dashboard-unauth

Create seq-dashboard-unath.yaml
patch-4
pussycat0x 2024-07-01 23:02:59 +05:30 committed by GitHub
commit 2a2377e823
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 34 additions and 0 deletions

View File

@ -0,0 +1,34 @@
id: seq-dashboard-unauth
info:
name: Seq Dashboard - Unauthenticated
author: DhiyaneshDK
severity: high
description: |
Seq is exposed without authentication
metadata:
verified: true
max-request: 1
shodan-query: title:"Seq"
tags: misconfig,exposure,seq,dashboard
http:
- method: GET
path:
- "{{BaseURL}}/#/dashboards"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'Log out'
- 'dashboards</a>'
condition: and
- type: status
status:
- 200