commit
7fbb859bdc
|
@ -4,20 +4,25 @@ info:
|
|||
name: Docker Registry Listing
|
||||
author: puzzlepeaches
|
||||
severity: medium
|
||||
tags: docker,devops
|
||||
reference:
|
||||
- https://notsosecure.com/anatomy-of-a-hack-docker-registry
|
||||
tags: misconfig,docker,devops
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/v2/_catalog"
|
||||
|
||||
host-redirects: true
|
||||
max-redirects: 1
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- '"repositories":'
|
||||
|
||||
- type: word
|
||||
part: header
|
||||
words:
|
||||
- "application/json"
|
||||
part: header
|
||||
|
|
Loading…
Reference in New Issue