updated matcher, extractor & info
parent
3b02b45a00
commit
968acaac28
|
@ -1,7 +1,7 @@
|
|||
id: neo4j-neodash-configexposed
|
||||
id: neo4j-neodash-config
|
||||
|
||||
info:
|
||||
name: Neo4j Neodash Detection
|
||||
name: Neo4j Neodash Config - Exposure
|
||||
author: icarot
|
||||
severity: medium
|
||||
description: |
|
||||
|
@ -10,9 +10,11 @@ info:
|
|||
cpe: cpe:2.3:a:neo4j:*:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
verified: true
|
||||
vendor: neo4j
|
||||
product: neodash
|
||||
tags: config,exposure,credential,neodash,neo4j
|
||||
shodan-query: title:"NeoDash"
|
||||
tags: config,exposure,neodash,neo4j
|
||||
|
||||
http:
|
||||
- method: GET
|
||||
|
@ -22,18 +24,25 @@ http:
|
|||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- 'standaloneHost'
|
||||
- 'standalonePort'
|
||||
- 'standaloneDatabase'
|
||||
condition: and
|
||||
|
||||
- type: word
|
||||
part: header
|
||||
words:
|
||||
- 'application/json'
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
||||
extractors:
|
||||
- type: json
|
||||
name: config.json
|
||||
name: config
|
||||
part: body
|
||||
json:
|
||||
- '.standaloneHost,.standalonePort,.standaloneDatabase,.standaloneUsername,.standalonePassword,.standaloneDashboardName'
|
||||
- '.standaloneDatabase,.standaloneUsername,.standalonePassword'
|
||||
|
|
Loading…
Reference in New Issue