Create mybb-forum-install.yaml

vulnerabilities/mybb-forum-install.yaml

@@ -0,0 +1,34 @@
+id: mybb-forum-install
+
+info:
+  name: MyBB Exposed Installation
+  author: ritikchaddha
+  severity: high
+  metadata:
+    verified: true
+    shodan-query: http.title:"MyBB"
+  tags: mybb,forum
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/install/index.php'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'MyBB'
+          - 'Installation Wizard'
+        condition: and
+
+      - type: word
+        part: body
+        words:
+          - 'currently locked'
+        negative: true
+
+      - type: status
+        status:
+          - 200