Enhancement: misconfiguration/proxy/metadata-openstack.yaml by cs

patch-1
MostInterestingBotInTheWorld 2022-02-28 13:38:21 -05:00
parent 6ee197b56d
commit da31d88a9f
1 changed files with 7 additions and 4 deletions

View File

@ -1,11 +1,13 @@
id: metadata-service-openstack
# This attack abuses a misconfigured proxy that allows access to the metadata
# IP or a name which resolves to the IP. A standard proxy request is made to
# the proxy using the full metadata URL, which the proxy will fulfull to its
# own metadata sevice.
#
# the proxy using the full metadata URL, which the proxy will fulfill to its
# own metadata service.
# The proxy may also be vulnerable to host/port enumeration on localhost or
# inside the private network.
info:
name: Openstack Metadata Service Check
author: sullo
@ -36,4 +38,5 @@ requests:
part: body
words:
- "vendor_data.json"
# Enhanced by cs on 2022/02/14
# Enhanced by cs on 2022/02/28