Add files via upload

patch-1
pussycat0x 2023-08-18 09:07:14 +05:30 committed by GitHub
parent 744ec172b1
commit 2b695516e1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 22 additions and 0 deletions

View File

@ -0,0 +1,22 @@
id: apache-couchdb-unauth
info:
name: Apache CouchDB - Unauthenticated Access
author: SleepingBag945
severity: high
metadata:
verified: "true"
shodan-query: product:"CouchDB"
fofa-query: app="APACHE-CouchDB"
tags: apache,couchdb,unauth,misconfig
http:
- method: GET
path:
- "{{BaseURL}}/_config"
matchers:
- type: dsl
dsl:
- 'status_code == 200 && contains(body,"httpd_design_handlers") && contains(body,"external_manager")'
condition: and