From 46ba0348fe7df8c7f678379158b2edbcbcca839b Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Tue, 23 Apr 2024 18:15:59 +0530 Subject: [PATCH] Create sabnzbd-installer.yaml --- .../installer/sabnzbd-installer.yaml | 32 +++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 http/misconfiguration/installer/sabnzbd-installer.yaml diff --git a/http/misconfiguration/installer/sabnzbd-installer.yaml b/http/misconfiguration/installer/sabnzbd-installer.yaml new file mode 100644 index 0000000000..68ac785fa2 --- /dev/null +++ b/http/misconfiguration/installer/sabnzbd-installer.yaml @@ -0,0 +1,32 @@ +id: sabnzbd-installer + +info: + name: SABnzbd Quick-Start Wizard - Detect + author: DhiyaneshDk + severity: high + description: | + Default installation wizard page of SABnzbd was discovered. + reference: + - https://www.sabnzbd.org/ + metadata: + verified: true + max-request: 1 + shodan-query: http.favicon.hash:"-1939892142" + fofa-query: body="SABnzbd Quick-Start Wizard" + tags: sabnzbd,wizard,installer,misconfig + +requests: + - method: GET + path: + - "{{BaseURL}}/sabnzbd/wizard/" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "SABnzbd Quick-Start Wizard" + + - type: status + status: + - 200