Create canon-c3325-unauth.yaml

patch-12
Ritik Chaddha 2024-09-20 19:09:05 +04:00 committed by GitHub
parent afaf822793
commit aaee0dc4f9
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 31 additions and 0 deletions

View File

@ -0,0 +1,31 @@
id: canon-c3325-unauth
info:
name: Canon R-ADV C3325 - Unauth
author: ritikchaddha
severity: high
description: |
Canon R-ADV C3325 unauthenticated dashboard has been exposed.
metadata:
verified: true
max-request: 1
shodan-query: title:"c3325"
tags: canon,c3325,unauth,exposure
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "writeln('Log Out"
- "Remote UI : Portal"
condition: and
- type: status
status:
- 200