Add: Unauth ClickHouse Disclosure

2021-08-27 14:08:17 +08:00 · 2021-08-27 14:08:17 +08:00 · b9a7c3a977
parent 22973735ee
commit b9a7c3a977
1 changed files with 24 additions and 0 deletions
--- a/network/clickhouse-unauth.yaml
+++ b/network/clickhouse-unauth.yaml
@ -0,0 +1,24 @@
+id: clickhouse-unauth
+
+info:
+  name: Unauth ClickHouse Disclosure
+  author: lu4nx
+  severity: high
+  tags: network,clickhouse
+
+network:
+  - inputs:
+      # 0011436c69636b486f75736520636c69656e741508b1a9030007 is header
+      # 64656661756c74 = default
+      - data: 0011436c69636b486f75736520636c69656e741508b1a903000764656661756c7400
+        type: hex
+
+    host:
+      - "{{Hostname}}:9000"
+
+    read-size: 100
+
+    matchers:
+      - type: word
+        words:
+          - "ClickHouse"