diff --git a/http/miscellaneous/mobsf-panel.yaml b/http/misconfiguration/mobsf-framework-exposure.yaml similarity index 50% rename from http/miscellaneous/mobsf-panel.yaml rename to http/misconfiguration/mobsf-framework-exposure.yaml index 157f2b6b94..b35bf6a14e 100644 --- a/http/miscellaneous/mobsf-panel.yaml +++ b/http/misconfiguration/mobsf-framework-exposure.yaml @@ -1,26 +1,28 @@ -id: exposed-MobSF-Instance +id: mobsf-framework-exposure info: - name: Exposed MobSF + name: MobSF Framework - Exposure author: Shine severity: high metadata: - max-request: 3 - tags: android, vulnerability scanner,mobsf + max-request: 1 + verified: true + shodan-query: title:"MobSF" + tags: misconfig,exposure,mobsf http: - method: GET path: - - '{{BaseURL}}' - - '{{BaseURL}}:8000' + - '{{BaseURL}}/recent_scans/' matchers-condition: and matchers: - type: word words: + - 'Recent Scans' - 'Mobile Security Framework - MobSF' - - 'RECENT SCANS' - - 'Mobile Security Framework' + condition: and + - type: status status: - 200