Merge pull request #853 from DhiyaneshGeek/master

Jboss Server Info , Mikrotik Router Graphing , Unauthenticated PRTG Traffic Grapher

misconfiguration/jboss-status.yaml

@@ -0,0 +1,23 @@
+id: jboss-web-console
+
+info:
+  name: JBoss Management Console Server Information
+  author: dhiyaneshDK
+  severity: low
+  reference: https://www.exploit-db.com/ghdb/5215
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/web-console/ServerInfo.jsp"
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "Application Server"
+          - "Management Console"
+        condition: and
+
+      - type: status
+        status:
+          - 200

misconfiguration/mikrotik-graph.yaml

@@ -0,0 +1,23 @@
+id: mikrotik-graph
+
+info:
+  name: Mikrotik Router Graphing
+  author: dhiyaneshDK
+  severity: low
+  reference: https://www.exploit-db.com/ghdb/4395
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/graphs/"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - 'Traffic and system resource graphing'
+        condition: and
+
+      - type: status
+        status:
+          - 200

misconfiguration/unauthenticated-prtg.yaml

@@ -0,0 +1,23 @@
+id: unauthenticated-prtg
+
+info:
+  name: Unauthenticated PRTG Traffic Grapher
+  author: dhiyaneshDK
+  severity: high
+  reference: https://www.exploit-db.com/ghdb/5808
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/sensorlist.htm"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - 'PRTG Traffic Grapher'
+        condition: and
+
+      - type: status
+        status:
+          - 200