Enhancement: misconfiguration/proxy/metadata-openstack.yaml by cs

patch-1
MostInterestingBotInTheWorld 2022-02-28 13:38:21 -05:00
parent 6ee197b56d
commit da31d88a9f
1 changed files with 7 additions and 4 deletions

View File

@ -1,11 +1,13 @@
id: metadata-service-openstack id: metadata-service-openstack
# This attack abuses a misconfigured proxy that allows access to the metadata # This attack abuses a misconfigured proxy that allows access to the metadata
# IP or a name which resolves to the IP. A standard proxy request is made to # IP or a name which resolves to the IP. A standard proxy request is made to
# the proxy using the full metadata URL, which the proxy will fulfull to its # the proxy using the full metadata URL, which the proxy will fulfill to its
# own metadata sevice. # own metadata service.
#
# The proxy may also be vulnerable to host/port enumeration on localhost or # The proxy may also be vulnerable to host/port enumeration on localhost or
# inside the private network. # inside the private network.
info: info:
name: Openstack Metadata Service Check name: Openstack Metadata Service Check
author: sullo author: sullo
@ -36,4 +38,5 @@ requests:
part: body part: body
words: words:
- "vendor_data.json" - "vendor_data.json"
# Enhanced by cs on 2022/02/14
# Enhanced by cs on 2022/02/28