misc update

2021-11-05 02:29:38 +05:30 · 2021-11-05 02:29:38 +05:30 · 99ba23f9af
parent 62a629cda9
commit 99ba23f9af
4 changed files with 4 additions and 5 deletions
--- a/misconfiguration/gocd/gocd-arbitrary-file.yaml
+++ b/misconfiguration/gocd/gocd-arbitrary-file.yaml
--- a/misconfiguration/gocd/gocd-encryption-key.yaml
+++ b/misconfiguration/gocd/gocd-encryption-key.yaml
--- a/misconfiguration/gocd/gocd-server-configuration.yaml
+++ b/misconfiguration/gocd/gocd-server-configuration.yaml
@ -28,4 +28,4 @@ requests:
          - "server agentAutoRegisterKey"
          - "webhookSecret"
          - "tokenGenerationKey"
-        part: body
+        condition: and
--- a/misconfiguration/gocd/gocd-unauth-dashboard.yaml
+++ b/misconfiguration/gocd/gocd-unauth-dashboard.yaml
@ -4,7 +4,7 @@ info:
  name: GoCd Unauth Dashboard
  author: dhiyaneshDk
  severity: medium
-  tags: go,lfi,gocd
+  tags: go,gocd,unauth
  metadata:
    shodan-query: 'http.title:"Create a pipeline - Go"'

@ -12,18 +12,17 @@ requests:
  - method: GET
    path:
      - '{{BaseURL}}/go/admin/pipelines/create?group=defaultGroup'
+
    matchers-condition: and
    matchers:
      - type: word
        words:
          - '<title>Create a pipeline - Go</title>'
-        condition: and
-        part: body

      - type: word
+        part: header
        words:
          - "text/html"
-        part: header

      - type: status
        status: