Merge pull request #10357 from projectdiscovery/sftpgo-admin-setup

Create sftpgo-admin-setup.yaml

http/misconfiguration/sftpgo-admin-setup.yaml

@@ -0,0 +1,31 @@
+id: sftpgo-admin-setup
+
+info:
+  name: SFTPGo Admin - Setup
+  author: ritikchaddha
+  severity: high
+  description: |
+    SFTPGo Admin Password setup page has been exposed.
+  metadata:
+    max-request: 1
+    verified: true
+    fofa-query: title="SFTPGo - Setup"
+  tags: sftpgo,misconfig,setup
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/web/admin/setup"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'SFTPGo - Setup'
+          - 'SFTPGo you need to create an admin user'
+        condition: or
+
+      - type: status
+        status:
+          - 200