diff --git a/http/vulnerabilities/ecstatic/node-ecstatic-listing.yaml b/http/vulnerabilities/ecstatic/node-ecstatic-listing.yaml new file mode 100644 index 0000000000..d701b97b60 --- /dev/null +++ b/http/vulnerabilities/ecstatic/node-ecstatic-listing.yaml @@ -0,0 +1,31 @@ +id: node-ecstatic-listing + +info: + name: Node ecstatic Directory Listing + author: DhiyaneshDK + severity: low + reference: + - https://tripla.dk/2020/03/26/multiple-vulnerabilities-in-nodejs-ecstatic-http-server-http-party/ + metadata: + verified: true + shodan-query: 'server: "ecstatic"' + max-request: 1 + tags: node,js,listing,ecstatic + +http: + - method: GET + path: + - "{{BaseURL}}/img/" + headers: + Range: 10000 + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "Index of /img/" + + - type: status + status: + - 200