diff --git a/misconfiguration/ampache-update-exposure.yaml b/misconfiguration/ampache-update-exposure.yaml new file mode 100644 index 0000000000..4f3fdf6040 --- /dev/null +++ b/misconfiguration/ampache-update-exposure.yaml @@ -0,0 +1,34 @@ +id: ampache-update-exposure + +info: + name: Ampache Update Page Exposure + author: ritikchaddha + severity: low + metadata: + verified: true + shodan-query: http.html:"Ampache Update" + tags: misconfig,ampache,update + +requests: + - method: GET + path: + - "{{BaseURL}}/update.php" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "Ampache Update" + case-insensitive: true + + - type: word + part: body + words: + - "No Update Needed" + - "No updates needed" + negative: true + + - type: status + status: + - 200