Merge pull request #5866 from projectdiscovery/blesta-installer

Create blesta-installer.yaml
patch-1
Prince Chaddha 2022-10-28 11:18:35 +05:30 committed by GitHub
commit dd9cef85e4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 33 additions and 0 deletions

View File

@ -0,0 +1,33 @@
id: blesta-installer
info:
name: Blesta Installer Exposure
author: DhiyaneshDk
severity: high
metadata:
verified: true
shodan-query: html:"Blesta installer"
tags: misconfig,blesta,install,exposure
requests:
- method: GET
path:
- '{{BaseURL}}/index.php/install'
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'Blesta Installer'
- 'Install via Web Browser'
condition: and
- type: word
part: header
words:
- 'text/html'
- type: status
status:
- 200