Opache control Panel - Unauthenticated Access

patch-1
pussycat0x 2023-10-17 01:30:54 +05:30 committed by GitHub
parent fae99dea62
commit f9f884fca1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 23 additions and 0 deletions

View File

@ -0,0 +1,23 @@
id: unauth-opache-control-panel
info:
name: Opache control Panel - Unauthenticated Access
author: pussycat0x
severity: high
metadata:
shodan-query: http.title:"Opcache Control Panel"
verified: true
max-request: 1
tags: opache,config,exposure,status
http:
- method: GET
path:
- "{{BaseURL}}/ocp.php"
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains(body, "Opcache Control Panel") && contains(body, "Reset") && contains(body, "Files")'
condition: and