fixed-entire-template

changed - matcher, added correct shodan query , changed severity
patch-1
Dhiyaneshwaran 2023-01-26 22:24:47 +05:30 committed by GitHub
parent 2df928bdbf
commit 50c60f8be0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 32 additions and 26 deletions

View File

@ -0,0 +1,32 @@
id: syncthing-dashboard
info:
name: Syncthing Dashboard Exposure
author: fabaff
severity: medium
reference:
- https://syncthing.net/
metadata:
verified: "true"
shodan-query: html:"Syncthing"
tags: misconfig,syncthing,exposure
requests:
- method: GET
path:
- '{{BaseURL}}'
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'The Syncthing Authors.'
- 'Actions'
condition: and
- type: status
status:
- 200

View File

@ -1,26 +0,0 @@
id: syncthing-detect
info:
name: Syncthing Detect
author: fabaff
severity: info
reference:
- https://syncthing.net/
metadata:
verified: true
shodan-query: title:"Syncthing"
tags: panel,syncthing,synchronisation
requests:
- method: GET
path:
- '{{BaseURL}}'
matchers:
- type: word
part: body
words:
- 'The Syncthing Authors.'
- 'ng-app="syncthing"'
condition: and
case-insensitive: true