diff --git a/misconfiguration/aem/aem-disk-usage.yaml b/misconfiguration/aem/aem-disk-usage.yaml new file mode 100644 index 0000000000..5ec5683a01 --- /dev/null +++ b/misconfiguration/aem/aem-disk-usage.yaml @@ -0,0 +1,37 @@ +id: aem-disk-usage + +info: + name: Adobe AEM Disk Usage Information Disclosure + author: dhiyaneshDk + severity: low + reference: + - https://raw.githubusercontent.com/danielmiessler/SecLists/master/Discovery/Web-Content/aem2.txt + metadata: + shodan-query: + - http.title:"AEM Sign In" + - http.component:"Adobe Experience Manager" + tags: misconfig,aem,adobe + +requests: + - method: GET + path: + - "{{BaseURL}}/etc/reports/diskusage.html" + - "{{BaseURL}}/etc/reports/diskusage.html?path=/content/dam" + + stop-at-first-match: true + matchers-condition: and + matchers: + - type: word + words: + - 'Disk Usage /' + - 'nodes' + condition: and + + - type: word + part: header + words: + - text/html + + - type: status + status: + - 200