diff --git a/exposures/configs/kyan-network-monitor-disclosure.yaml b/exposures/configs/kyan-network-monitor-disclosure.yaml new file mode 100644 index 0000000000..aa8a0f5a2e --- /dev/null +++ b/exposures/configs/kyan-network-monitor-disclosure.yaml @@ -0,0 +1,27 @@ +id: kyan-network-monitor-disclosure + +info: + name: Kyan network monitoring device account and password disclosure + author: pikpikcu + severity: medium + reference: | + - https://mp.weixin.qq.com/s/6phWjDrGG0pCpGuCdLusIg + tags: kyan,disclosure + +requests: + - method: GET + path: + - "{{BaseURL}}/hosts" + + matchers-condition: and + matchers: + + - type: word + words: + - "UserName=" + - "Password=" + condition: and + + - type: status + status: + - 200