Create alibaba-mongoshake-unauth.yaml

2021-06-01 10:53:26 +00:00 · 2021-06-01 10:53:26 +00:00 · 9f8852572e
parent a5ccb5f893
commit 9f8852572e
1 changed files with 29 additions and 0 deletions
--- a/misconfiguration/alibaba-mongoshake-unauth.yaml
+++ b/misconfiguration/alibaba-mongoshake-unauth.yaml
@ -0,0 +1,29 @@
+id: alibaba-mongoshake-unauth
+
+info:
+  name: Alibaba Mongoshake Unauth
+  author: pikpikcu
+  severity: info
+  tags: mongoshake,unauth
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/conf'
+      - '{{BaseURL}}/worker'
+      - '{{BaseURL}}/repl'
+
+    matchers-condition: and
+    matchers:
+
+      - type: word
+        words:
+          - 'MongoUrls'
+          - 'worker_id'
+          - 'jobs_in_queue'
+          - 'logs_repl'
+          - 'who'
+
+      - type: status
+        status:
+          - 200