Add files via upload

exposed-panels/kafka-manager-exposure.yaml

@@ -0,0 +1,35 @@
+id: kafka-manager-exposure
+
+info:
+  name: Kafka Manager Exposure
+  author: Paper-Pen
+  severity: low
+  description: A kafka manager unauthorized access was discovered.
+  reference:
+    - https://github.com/yahoo/CMAK
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
+    cvss-score: 8.3
+    cwe-id: CWE-522
+  metadata:
+    fofa-query: app="Kafka-Manager"
+  tags: tech,kafka,kafa-manager
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "Kafka Manager"
+          - "Cluster"
+        condition: and
+
+      - type: status
+        part: header
+        status:
+          - 200
+