diff --git a/unigui-server-monitor-exposure.yaml b/unigui-server-monitor-exposure.yaml new file mode 100644 index 0000000000..bd43afad2f --- /dev/null +++ b/unigui-server-monitor-exposure.yaml @@ -0,0 +1,34 @@ +id: unigui-server-monitor-exposure + +info: + name: UniGUI Server Monitor Panel Exposure + author: serrapa + severity: medium + description: Detects exposed UniGUI Server Monitor Panels which could reveal sensitive server statistics, users sessions, licensing information and others data. + reference: + - https://www.unigui.com/doc/online_help/using-server-monitor-(server-c.htm + tags: exposure,unigui + +requests: + - method: GET + path: + - "{{BaseURL}}/server" + + matchers-condition: and + matchers: + - type: word + words: + - "uniGUI Standalone Server" + - "uniGUI License Information" + - "Server Statistics" + part: body + + - type: status + status: + - 200 + + - type: dsl + dsl: + - "contains(body, 'layout:\"fit\",title:\"uniGUI Standalone Server\"')" + - "contains(body, 'layout:\"absolute\",title:\"Server Statistics\"')" +