format -fix

patch-1
pussycat0x 2023-03-14 22:00:03 +05:30 committed by GitHub
parent 09f4f5efc1
commit d7efc43dda
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 20 deletions

View File

@ -1,11 +1,12 @@
id: apache-nifi-unauth
info:
name: Apache-NIFI-Unauth
name: Apache NiFi - Unauthenticated Access
author: pwnhxl
severity: high
description: Apache-NIFI-Unauth.
reference:
description: |
Apache NiFi server was able to be accessed because no authentication was required.
reference: |
- https://github.com/jm0x0/apache_nifi_processor_rce
metadata:
verified: "true"
@ -13,23 +14,22 @@ info:
tags: apache,nifi,unauth
requests:
- raw:
- |
GET /nifi-api/access/config HTTP/1.1
Host: {{Hostname}}
- method: GET
path:
- "{{BaseURL}}/nifi-api/access/config"
matchers-condition: and
matchers:
- type: word
part: body
words:
- '{"config":{"supportsLogin":false}}'
matchers-condition: and
matchers:
- type: word
part: body
words:
- '{"config":{"supportsLogin":false}}'
- type: word
part: header
words:
- 'application/json'
- type: word
part: header
words:
- 'application/json'
- type: status
status:
- 200
- type: status
status:
- 200