diff --git a/misconfiguration/alibaba-mongoshake-unauth.yaml b/misconfiguration/alibaba-mongoshake-unauth.yaml new file mode 100644 index 0000000000..6de46b6ec7 --- /dev/null +++ b/misconfiguration/alibaba-mongoshake-unauth.yaml @@ -0,0 +1,27 @@ +id: alibaba-mongoshake-unauth + +info: + name: Alibaba Mongoshake Unauth + author: pikpikcu + severity: info + tags: mongoshake,unauth + +requests: + - method: GET + path: + - '{{BaseURL}}/' + + matchers-condition: and + matchers: + + - type: word + words: + - '{"Uri":"/worker","Method":"GET"}' + - type: word + words: + - 'text/plain' + part: header + + - type: status + status: + - 200