Create unauthenticated-alert-manager.yaml

misconfiguration/unauthenticated-alert-manager.yaml

@@ -0,0 +1,24 @@
+id: unauthenticated-alert-manager
+
+info:
+  name: Unauthenticated Alert Manager
+  author: dhiyaneshDK
+  severity: high
+  reference: https://www.shodan.io/search?query=http.title%3A%22Alertmanager%22
+  tags: unauth,alertmanager
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/#/alerts"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - '<title>Alertmanager</title>'
+        condition: or
+
+      - type: status
+        status:
+          - 200