From 436613c0f7891c99ae8f08e12150db07a94e19cb Mon Sep 17 00:00:00 2001 From: pussycat0x <65701233+pussycat0x@users.noreply.github.com> Date: Sun, 20 Feb 2022 16:45:11 +0530 Subject: [PATCH] Add files via upload --- ...authenticated-x-proxy-dashboar-detect.yaml | 23 +++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 misconfiguration/unauthenticated-x-proxy-dashboar-detect.yaml diff --git a/misconfiguration/unauthenticated-x-proxy-dashboar-detect.yaml b/misconfiguration/unauthenticated-x-proxy-dashboar-detect.yaml new file mode 100644 index 0000000000..9e6e68e206 --- /dev/null +++ b/misconfiguration/unauthenticated-x-proxy-dashboar-detect.yaml @@ -0,0 +1,23 @@ +id: unauthenticated-x-proxy-dashboar-detect +info: + name: X-Proxy Dashboard Detect + author: pussycat0x + severity: High + metadata: + fofa-dork: "X-Proxy Dashboard" + tags: login, tech +requests: + - method: GET + path: + - "{{BaseURL}}/" + matchers-condition: and + matchers: + - type: word + words: + - 'Configurations' + - 'Dashboard' + condition: and + part: body + - type: status + status: + - 200 \ No newline at end of file