diff --git a/http/misconfiguration/redpanda-console.yaml b/http/misconfiguration/redpanda-console.yaml new file mode 100644 index 0000000000..8e1c70497a --- /dev/null +++ b/http/misconfiguration/redpanda-console.yaml @@ -0,0 +1,33 @@ +id: redpanda-console + +info: + name: Redpanda Console - Exposure + author: kh4sh3i + severity: medium + description: | + Unauthorized access to the Redpanda Console could allow attackers to view or manipulate streaming data, monitor clusters, or access configuration information, leading to potential data leaks or service disruption. + impact: | + Exposing the Redpanda Console to the public can result in unauthorized access, leading to data leaks, misconfigurations, or even denial of service attacks on the streaming infrastructure. + reference: + - https://github.com/redpanda-data/console + metadata: + verified: true + max-request: 1 + shodan-query: title:"Redpanda Console" + tags: misconfig,redpanda,console,streaming + +http: + - method: GET + path: + - "{{BaseURL}}/overview" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "Redpanda Console" + + - type: status + status: + - 200 diff --git a/redpanda-console-detection.yaml b/redpanda-console-detection.yaml deleted file mode 100644 index 3159f6f99c..0000000000 --- a/redpanda-console-detection.yaml +++ /dev/null @@ -1,37 +0,0 @@ -id: redpanda-console-detection - -info: - name: Redpanda Console Detection - author: kh4sh3i - severity: info - description: | - Detects Redpanda Console, a UI for managing data streaming with Redpanda. - reference: - - https://github.com/redpanda-data/console - tags: redpanda, console, streaming, panel - -requests: - - method: GET - path: - - "{{BaseURL}}/" # Target the base URL or specific common endpoint - - matchers-condition: or - matchers: - - type: word - words: - - "Redpanda Console" # Check for text that indicates Redpanda Console in the page body - part: body - - - type: word - words: - - "Redpanda-Console" # Custom headers or cookies specific to Redpanda Console - part: header - - - type: status - status: - - 200 - - - type: word - words: - - "/static/js/main" # Detect the presence of static files used by the UI - part: body