Merge pull request #10147 from projectdiscovery/kodbox-installer

Create kodbox-installer.yaml
patch-4
pussycat0x 2024-06-28 12:06:29 +05:30 committed by GitHub
commit 7951781ddf
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 34 additions and 0 deletions

View File

@ -0,0 +1,34 @@
id: kodbox-installer
info:
name: Kodbox Installation Page - Exposure
author: DhiyaneshDK
severity: high
description: |
Kodbox is susceptible to the Installation page exposure due to misconfiguration.
metadata:
verified: true
max-request: 1
fofa-query: title="kodbox" && body="install"
tags: misconfig,exposure,install,kodbox
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "Kodbox-Installation"
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200