diff --git a/http/misconfiguration/grav-register-admin.yaml b/http/misconfiguration/grav-register-admin.yaml new file mode 100644 index 0000000000..77daa8f616 --- /dev/null +++ b/http/misconfiguration/grav-register-admin.yaml @@ -0,0 +1,29 @@ +id: grav-register-admin + +info: + name: Grav Register Admin User - Detect + author: DhiyaneshDk + severity: high + metadata: + max-request: 1 + verified: true + shodan-query: title:"Grav Register Admin User" + tags: misconfig,grav,register,admin,exposure + +http: + - method: GET + path: + - "{{BaseURL}}/admin" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - 'Grav Register Admin User | Grav' + - 'admin accounts' + condition: and + + - type: status + status: + - 200