From ba8c87d0ebca083294252447c2a97e19f3a83fb3 Mon Sep 17 00:00:00 2001 From: Rishi Date: Sat, 10 Aug 2024 11:17:03 +0100 Subject: [PATCH] airos detect --- http/exposed-panels/airos-detect.yaml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 http/exposed-panels/airos-detect.yaml diff --git a/http/exposed-panels/airos-detect.yaml b/http/exposed-panels/airos-detect.yaml new file mode 100644 index 0000000000..872a18bd38 --- /dev/null +++ b/http/exposed-panels/airos-detect.yaml @@ -0,0 +1,18 @@ +id: airos-detect + +info: + name: AIROS software detection + author: rxerium + severity: info + description: | + This template checks if the AIROS logo image is exposed at `/images/airos_logo.png` endpoint. If it returns a status code 200, it might indicate exposure of sensitive resources. + +requests: + - method: GET + path: + - "{{BaseURL}}/images/airos_logo.png" + + matchers: + - type: status + status: + - 200 \ No newline at end of file