Merge pull request #9103 from Deadbeastrs/main

Added Teampass LDAP template
patch-1
pussycat0x 2024-02-07 17:14:54 +05:30 committed by GitHub
commit 5983bcb78a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 44 additions and 0 deletions

View File

@ -0,0 +1,44 @@
id: teampass-ldap
info:
name: Teampass LDAP Debug Config - Detect
author: josecosta
severity: medium
description: |
Teampass ldap.debug.txt config was detected. This file is generated on "/files/ldap.debug.txt" for versions earlier than 3.0.0.0 when utilizing the "Test current configuration" in LDAP settings.
reference:
- https://github.com/nilsteampassnet/TeamPass/commit/ea9838481a58879cdf3def31046955efcff5a546#diff-61809be6a8fff101e3748a0c7dfad90bR16
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cwe-id: CWE-200
metadata:
max-request: 1
verified: true
fofa-query: app="TEAMPASS"
tags: exposure,teampass,ldap,logs
http:
- method: GET
path:
- "{{BaseURL}}/files/ldap.debug.txt"
matchers-condition: and
matchers:
- type: word
part: header
words:
- 'base_dn'
- 'search_base'
- 'bind_dn'
- 'bind_passwd'
condition: and
- type: word
part: header
words:
- 'text/plain'
- type: status
status:
- 200