diff --git a/http/misconfiguration/installer/sabnzbd-installer.yaml b/http/misconfiguration/installer/sabnzbd-installer.yaml new file mode 100644 index 0000000000..68ac785fa2 --- /dev/null +++ b/http/misconfiguration/installer/sabnzbd-installer.yaml @@ -0,0 +1,32 @@ +id: sabnzbd-installer + +info: + name: SABnzbd Quick-Start Wizard - Detect + author: DhiyaneshDk + severity: high + description: | + Default installation wizard page of SABnzbd was discovered. + reference: + - https://www.sabnzbd.org/ + metadata: + verified: true + max-request: 1 + shodan-query: http.favicon.hash:"-1939892142" + fofa-query: body="SABnzbd Quick-Start Wizard" + tags: sabnzbd,wizard,installer,misconfig + +requests: + - method: GET + path: + - "{{BaseURL}}/sabnzbd/wizard/" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "SABnzbd Quick-Start Wizard" + + - type: status + status: + - 200