diff --git a/security-misconfiguration/manage-engine-ad-search.yaml b/security-misconfiguration/manage-engine-ad-search.yaml new file mode 100644 index 0000000000..dfbc0b38fe --- /dev/null +++ b/security-misconfiguration/manage-engine-ad-search.yaml @@ -0,0 +1,23 @@ +id: manage-engine-ad-search + +#Default Listening ports : HTTP_8080 and HTTPS_8443 + +info: + name: Manage Engine AD Search + author: PR3R00T + severity: High + description: Manage Engine AD Manager service can be configured to allow anonymous users to browse the AD list remotely. + +requests: + - method: GET + path: + - "{{BaseURL}}/ADSearch.cc?methodToCall=search" + matchers-condition: and + matchers: + - type: status + status: + - 200 + - type: word + words: + - "ManageEngine" + - "ADManager"