Create teamcity-register.yaml

misconfiguration/teamcity-register.yaml

@@ -0,0 +1,34 @@
+id: register-teamcity
+
+info:
+  name: JetBrains - TeamCity -  register User Allow
+  author: Ph33r
+  severity: high
+  description: |
+    JetBrains - TeamCity -  register User Allow
+  reference:
+    - https://ph33r.medium.com/misconfig-in-teamcity-panel-lead-to-auth-bypass-in-apache-org-0day-146f6a1a4e2b
+  tags: misconfig,auth-bypass,register,teamcity
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
+    cvss-score: 7.30
+    cwe-id: CWE-200
+
+requests:
+  - raw:
+      - |
+        GET /registerUser.html?init=1 HTTP/1.1
+        Host: {{Hostname}}
+        Referer: {{RootURL}}/
+        Origin: {{RootURL}}
+    redirects: true
+    max-redirects: 1
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - 'Register a New User Account'
+© 2022 GitHub, Inc.
+Terms
+Privacy
+Security