Update aem-misc-admin.yaml

patch-1
Prince Chaddha 2022-08-29 22:07:43 +05:30 committed by GitHub
parent c1e6308b4f
commit 350c4f8799
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 3 deletions

View File

@ -1,7 +1,7 @@
id: aem-misc-admin
info:
name: Adobe AEM Misc Admin Exposure
name: Adobe AEM Misc Admin Dashboard Exposure
author: dhiyaneshDk
severity: high
reference:
@ -11,12 +11,13 @@ info:
shodan-query:
- http.title:"AEM Sign In"
- http.component:"Adobe Experience Manager"
tags: aem,adobe,exposure
tags: misconfig,aem,adobe,exposure
requests:
- method: GET
path:
- "{{BaseURL}}/miscadmin"
- "{{BaseURL}}/mcmadmin#/content/dashboard"
- "{{BaseURL}}/miscadmin#/etc/mobile"
- "{{BaseURL}}/miscadmin#/etc/segmentation"
- "{{BaseURL}}/miscadmin#/etc/blueprints"
@ -32,7 +33,8 @@ requests:
part: body
words:
- '<title>AEM Tools</title>'
condition: and
- '<title>AEM MCM</title>'
condition: or
- type: word
part: header