Create homeautomation-v3-openredirect.yaml

homeautomation-v3-openredirect.yaml

@@ -0,0 +1,19 @@
+id: homeautomation-v3-openredirect
+
+info:
+  name: HomeAutomation v3.3.2 Open Redirect
+  author: 0x_Akoko
+  reference: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5559.php
+  severity: medium
+  tags: homeautomation,redirect
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/homeautomation_v3_3_2/api.php?do=groups/toggle&groupid=1&status=1&redirect=https://example.com/"
+
+    matchers:
+      - type: regex
+        regex:
+          - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\-_\.@]*)example\.com.*$'
+        part: header