From d9e859953c345899a7eda48dce07627d9bc29533 Mon Sep 17 00:00:00 2001 From: Evolutionsec <30623287+ks6274@users.noreply.github.com> Date: Mon, 23 Aug 2021 12:52:33 +0530 Subject: [PATCH 1/2] updates to the phpmyadmin panel detection script Added another possible path URL for detection phpmyadmin panel and matching condition along with possile title to be detected for confirmation of the exposed phpmyadmin panel. --- exposed-panels/phpmyadmin-panel.yaml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/exposed-panels/phpmyadmin-panel.yaml b/exposed-panels/phpmyadmin-panel.yaml index 70390d3b8f..256bd15fd4 100644 --- a/exposed-panels/phpmyadmin-panel.yaml +++ b/exposed-panels/phpmyadmin-panel.yaml @@ -20,14 +20,17 @@ requests: - "{{BaseURL}}/typo3/phpmyadmin/" - "{{BaseURL}}/web/phpmyadmin/" - "{{BaseURL}}/xampp/phpmyadmin/" + - "{{BaseURL}}/phpMyAdmin/" #add another possible path for phpmyadmin panel detection + matchers-condition: or #add matching condition matchers: - type: word words: - "phpMyAdmin" + - "phpMyAdmin " #result pattern with a trailing whitespace. extractors: - type: regex part: body group: 1 regex: - - 'v=([a-z0-9-._]+)' \ No newline at end of file + - 'v=([a-z0-9-._]+)' From 3af12370afea69d7bcd2fd65ab8ce0b841cd0fdf Mon Sep 17 00:00:00 2001 From: sandeep Date: Mon, 23 Aug 2021 14:24:04 +0530 Subject: [PATCH 2/2] Update phpmyadmin-panel.yaml --- exposed-panels/phpmyadmin-panel.yaml | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/exposed-panels/phpmyadmin-panel.yaml b/exposed-panels/phpmyadmin-panel.yaml index 256bd15fd4..51499eeae1 100644 --- a/exposed-panels/phpmyadmin-panel.yaml +++ b/exposed-panels/phpmyadmin-panel.yaml @@ -20,13 +20,12 @@ requests: - "{{BaseURL}}/typo3/phpmyadmin/" - "{{BaseURL}}/web/phpmyadmin/" - "{{BaseURL}}/xampp/phpmyadmin/" - - "{{BaseURL}}/phpMyAdmin/" #add another possible path for phpmyadmin panel detection - matchers-condition: or #add matching condition + - "{{BaseURL}}/phpMyAdmin/" + matchers: - type: word words: - - "phpMyAdmin" - - "phpMyAdmin " #result pattern with a trailing whitespace. + - "phpMyAdmin" extractors: - type: regex