Create teamcity-guest.yaml

misconfiguration/teamcity-guest.yaml

@@ -0,0 +1,34 @@
+id: guest-teamcity
+
+info:
+  name: JetBrains - TeamCity - Unauthenticated Control Panel Information Disclosure
+  author: Ph33r
+  severity: high
+  description: |
+    JetBrains - TeamCity - Unauthenticated Control Panel Information Disclosure login like a Guest
+  reference:
+    - https://ph33r.medium.com/misconfig-in-teamcity-panel-lead-to-auth-bypass-in-apache-org-exploit-146f6a1a4e2b
+  tags: misconfig,auth-bypass,register,teamcity
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
+    cvss-score: 7.30
+    cwe-id: CWE-200
+
+requests:
+  - raw:
+      - |
+        GET /guestLogin.html?guest=1 HTTP/1.1
+        Host: {{Hostname}}
+        Referer: {{RootURL}}/
+        Origin: {{RootURL}}
+    cookie-reuse: true
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: header
+        words:
+          - 'Location: /overview.html'
+          
+      - type: status
+        status:
+          - 302