daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #6396 from davtur19/patch-1 

Add reference to docker-registry
patch-1
Ritik Chaddha 2022-12-20 19:40:59 +05:30 committed by GitHub
parent 419a9bd46c 0aee3ac994
commit 7fbb859bdc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
misconfiguration/docker-registry.yaml
View File

@ -4,20 +4,25 @@ info:
name: Docker Registry Listing name: Docker Registry Listing
author: puzzlepeaches author: puzzlepeaches
severity: medium severity: medium
tags: docker,devops reference:
- https://notsosecure.com/anatomy-of-a-hack-docker-registry
tags: misconfig,docker,devops
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/v2/_catalog" - "{{BaseURL}}/v2/_catalog"
host-redirects: true host-redirects: true
max-redirects: 1 max-redirects: 1
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: word - type: word
part: body
words: words:
- '"repositories":' - '"repositories":'
- type: word - type: word
part: header
words: words:
- "application/json" - "application/json"
part: header