Add Redis Commander Panel Detection
Redis Commander is a common ui for redis. Access to Redis Commander can allow access to redis and expose sensible session or cache data.patch-1
parent
a21cec6362
commit
3c21e2fc16
|
@ -0,0 +1,22 @@
|
|||
id: redis-commander-exposure
|
||||
|
||||
info:
|
||||
name: Redis Commander Exposure
|
||||
author: dahse89
|
||||
severity: low
|
||||
reference:
|
||||
- https://joeferner.github.io/redis-commander/
|
||||
- https://github.com/joeferner/redis-commander
|
||||
tags: panel
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- '{{BaseURL}}'
|
||||
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
- "<title>Redis Commander"
|
||||
- "redisCommanderBearerToken"
|
||||
condition: and
|
Loading…
Reference in New Issue