Added Nginx Dashboard (#4318)

patch-1
Sandeep Singh 2022-05-08 00:05:22 +05:30 committed by GitHub
parent cb66f11f66
commit b37f2dbff5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 27 additions and 0 deletions

View File

@ -0,0 +1,27 @@
id: unauthenticated-nginx-dashboard
info:
name: Nginx Dashboard
author: BibekSapkota (sar00n)
severity: low
reference:
- https://www.acunetix.com/vulnerabilities/web/unrestricted-access-to-nginx-dashboard/
metadata:
shpdan-query: html:"NGINX+ Dashboard"
tags: misconfig,nginx
requests:
- method: GET
path:
- "{{BaseURL}}/dashboard.html"
max-size: 2048
matchers-condition: and
matchers:
- type: word
words:
- 'Nginx+ Dashboard'
- type: status
status:
- 200