Update and rename lidarr-settings-indexers.yaml to http/misconfiguration/lidarr-dashboard-unauth.yaml
parent
f55c4d28a0
commit
b18a05eb04
|
@ -0,0 +1,36 @@
|
|||
id: lidarr-dashboard-unauth
|
||||
|
||||
info:
|
||||
name: Lidarr Dashboard - Unauthenticated
|
||||
author: ProjectDiscoveryAI
|
||||
severity: medium
|
||||
description: |
|
||||
Exposed Lidarr was detected which can lead to sensitive information disclosure.
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 1
|
||||
shodan-query: title:"Lidarr"
|
||||
tags: lidarr,dashboard,exposure
|
||||
|
||||
http:
|
||||
- raw:
|
||||
- |
|
||||
GET /settings/indexers HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- "<title>Lidarr</title>"
|
||||
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- "Login - Lidarr"
|
||||
negative: true
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
|
@ -1,25 +0,0 @@
|
|||
id: lidarr-settings-indexers
|
||||
|
||||
info:
|
||||
name: Lidarr Settings Indexers Exposure
|
||||
author: ProjectDiscoveryAI
|
||||
severity: medium
|
||||
description: |
|
||||
This template checks for exposed Lidarr indexer settings which can lead to sensitive information disclosure.
|
||||
|
||||
http:
|
||||
- raw:
|
||||
- |
|
||||
GET /lidarr/settings/indexers HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
- type: word
|
||||
words:
|
||||
- "Lidarr"
|
||||
- "Indexer"
|
||||
- "Settings"
|
Loading…
Reference in New Issue