Create open-proxy-external.yaml

Simple detection of open http proxies.

misconfiguration/proxy/open-proxy-external.yaml

@@ -0,0 +1,36 @@
+id: open-proxy-external
+
+info:
+  name: Open Proxy To External Network
+  author: gtrrnr
+  severity: high
+  description: The host is configured as a proxy which allows access to other hosts on the external network.
+  reference:
+    - https://en.wikipedia.org/wiki/Open_proxy
+    - https://www.acunetix.com/vulnerabilities/web/apache-configured-to-run-as-proxy/
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
+    cvss-score: 8.6
+    cwe-id: CWE-441
+  remediation: Disable the proxy or restrict configuration to only allow access to approved hosts/ports.
+  tags: exposure,config,proxy,misconfig
+  metadata:
+    max-request: 2
+
+http:
+  - raw:
+      - |+
+        GET http://example.com HTTP/1.1
+        Host: example.com
+
+      - |+
+        GET http://{{interactsh-url}} HTTP/1.1
+        Host: {{interactsh-url}}
+
+    unsafe: true
+    matchers:
+      - type: dsl
+        dsl:
+          - contains(body_1, "www.iana.org")
+          - contains(header_2, "X-Interactsh-Version")
+        condition: or