From d1f5b94e78b2c09fc19d48b483e07733b6f43622 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Mon, 29 Jul 2024 09:12:23 +0530 Subject: [PATCH] Create deployment-interface-exposed.yaml --- .../deployment-interface-exposed.yaml | 29 +++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 http/misconfiguration/deployment-interface-exposed.yaml diff --git a/http/misconfiguration/deployment-interface-exposed.yaml b/http/misconfiguration/deployment-interface-exposed.yaml new file mode 100644 index 0000000000..7442c46ba0 --- /dev/null +++ b/http/misconfiguration/deployment-interface-exposed.yaml @@ -0,0 +1,29 @@ +id: deployment-interface-exposed + +info: + name: Deployment Management Interface - Exposed + author: DhiyaneshDK + severity: medium + description: | + Deployment Management Interface is exposed. This exposure could potentially allow unauthorized access to the management interface + metadata: + verified: true + max-request: 1 + tags: deployment,management,misconfig + +http: + - raw: + - | + GET / HTTP/1.1 + Host: {{Hostname}} + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "Deployment Management Interface" + + - type: status + status: + - 200