Revert "Delete netgear-router-disclosure.yaml"

This reverts commit 3b969e7e0d.
patch-1
Prince Chaddha 2021-08-18 17:02:08 +05:30
parent 3b969e7e0d
commit dd1bbe6093
1 changed files with 41 additions and 0 deletions

View File

@ -0,0 +1,41 @@
id: netgear-router-disclosure
info:
name: Netgear Router S/N Disclosure
description: Multiple Netgear router models disclose their serial number which can be used to obtain the admin password if password recovery is enabled.
reference:
- https://www.exploit-db.com/exploits/47117
- https://www.exploit-db.com/exploits/45741
author: geeknik
severity: critical
tags: netgear,disclosure,iot
requests:
- method: GET
path:
- "{{BaseURL}}/rootDesc.xml"
matchers-condition: and
matchers:
- type: status
status:
- 200
- 501
- type: word
words:
- "<serialNumber>"
- "<deviceType>"
- "<modelNumber>"
condition: and
- type: word
part: header
words:
- text/xml
extractors:
- type: regex
group: 1
regex:
- "<serialNumber>([A-Z0-9]+)<\\/serialNumber>"