Update and rename http/misconfiguration/elgg-install.yaml to http/misconfiguration/installer/elgg-install.yaml

http/misconfiguration/elgg-install.yaml

@@ -1,26 +0,0 @@
-id: elgg-install
-
-info:
-  name: Elgg - Exposed Installation
-  author: s4e-io
-  severity: high
-  description: Elgg  was discovered.
-  reference:
-    - https://github.com/elgg/elgg
-  metadata:
-    max-request: 1
-    fofa-query: "elgg"
-  tags: tech,elgg,exposure,misconfig
-
-http:
-  - raw:
-      - |
-        GET /install.php HTTP/1.1
-        Host: {{Hostname}}
-
-    matchers:
-      - type: dsl
-        dsl:
-          - 'contains_all(body,"<title>Elgg Install : Welcome</title>", "Installing Elgg")'
-          - 'status_code == 200'
-        condition: and

http/misconfiguration/installer/elgg-install.yaml

@@ -0,0 +1,26 @@
+id: elgg-installer
+
+info:
+  name: Elgg - Installation
+  author: s4e-io
+  severity: high
+  description: Elgg Installation was discovered.
+  reference:
+    - https://github.com/elgg/elgg
+  metadata:
+    max-request: 1
+    verified: true
+    fofa-query: title="Welcome to Elgg"
+  tags: install,elgg,exposure,misconfig
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/install.php"
+
+    matchers:
+      - type: dsl
+        dsl:
+          - 'contains_any(body,"Elgg Install : Welcome", "Installing Elgg", "Welcome to Elgg")'
+          - 'status_code == 200'
+        condition: and