From ea82d21d64b746afee549de7e56084310a31fcda Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Wed, 27 Sep 2023 10:04:00 +0530 Subject: [PATCH] Create klr300n-installer.yaml --- .../installer/klr300n-installer.yaml | 36 +++++++++++++++++++ 1 file changed, 36 insertions(+) create mode 100644 http/misconfiguration/installer/klr300n-installer.yaml diff --git a/http/misconfiguration/installer/klr300n-installer.yaml b/http/misconfiguration/installer/klr300n-installer.yaml new file mode 100644 index 0000000000..b17ed06001 --- /dev/null +++ b/http/misconfiguration/installer/klr300n-installer.yaml @@ -0,0 +1,36 @@ +id: klr300n-install + +info: + name: KLR 300N Router - Exposed Installation + author: andreluna + severity: high + description: | + Home router wireless KLR 300N setup page were Detected. + reference: + - http://www.keo.com.br/produtos/roteador-klr-300n + - http://www.keo.com.br/wp-content/uploads/2017/09/Manual_KLR_300N_03-17_site.pdf + metadata: + max-request: 1 + verified: true + shodan-query: html:"def_wirelesspassword" + tags: keo,klr300n,misconfig,exposure,iot,install + +http: + - method: GET + path: + - "{{BaseURL}}" + + host-redirects: true + matchers-condition: and + matchers: + - type: word + part: body + words: + - "Roteador Wireless KLR 300N" + - "def_wirelesspassword" + - "Installation assitance" + condition: and + + - type: status + status: + - 200