6279e1fb70
Added template for IIS Internal IP Disclosure
...
By sending a HTTP 1.0 request to the root of the webserver, sometimes an internal IP address is disclosed in the Location header of the 302 response.
2021-06-09 15:30:59 +01:00
83ce809e8d
Updated author names
2021-06-09 17:50:56 +05:30
0013f94807
Merge pull request #1631 from projectdiscovery/sap_update
...
SAP NetWeaver update
2021-06-09 14:17:51 +05:30
1851068721
Updated matcher
2021-06-08 00:33:06 +05:30
0fe0d327b0
moving files around
2021-06-07 19:57:59 +05:30
52adac2e12
Create firebase-urls.yaml
2021-06-06 19:38:51 +05:30
158914d4db
Create artifactory-anonymous-deploy.yaml
2021-06-06 19:37:32 +05:30
1d07ace8a5
Merge pull request #1634 from DhiyaneshGeek/master
...
Exposed jQuery File Upload
2021-06-06 17:58:25 +05:30
6649abf131
Update exposed-jquery-file-upload.yaml
2021-06-06 17:55:05 +05:30
fae9755374
Merge pull request #1639 from pdelteil/patch-9
...
Update shell-history.yaml
2021-06-06 13:40:47 +05:30
0cf8ffdc57
misc changes
2021-06-06 13:39:16 +05:30
e2eaedc6a1
misc updates
2021-06-06 13:19:01 +05:30
652da29f9a
Update shell-history.yaml
...
There are two problems with this template, it only checks for chmod commands but most importantly doesn't check for html tags. A real history file the response doesn't include html tags at all.
So, I'm adding two rules: Check for another possible commands (from real example) and adding a negative rule to discard false positives like this one:
nuclei -debug -t /home/kali/nuclei-templates/misconfiguration/shell-history.yaml -u http://777.urbanup.com
2021-06-05 22:06:30 -04:00
9014a4b0a2
Update aws-object-listing.yaml
...
Added extractor that retrieves the name of the s3 bucket.
Test
nuclei -t nuclei-templates/misconfiguration/aws-object-listing.yaml -u http://img.secnews.gr
[2021-06-06 01:19:10] [aws-object-listing] [http] [low] http://imgcdn.secnews.gr [img.secnews.gr]
2021-06-05 21:27:44 -04:00
0d82660f90
Create exposed-jquery-file-upload.yaml
2021-06-05 22:04:09 +05:30
a85c1dd35a
Moving files around + duplicate remove
2021-06-05 15:57:13 +05:30
ae8c130668
Moving files around
2021-06-05 15:55:01 +05:30
edcc35d604
Added Private key exposure via helper detector
2021-06-04 20:46:19 +05:30
0c436e35aa
Added airflow-debug
2021-06-03 19:39:51 +05:30
0c4f75d3ad
Duplicate template
2021-06-03 18:44:50 +05:30
bdc803fd4b
Added CVE-2020-13927
2021-06-03 14:23:34 +05:30
f63cd48c79
Update alibaba-mongoshake-unauth.yaml
2021-06-02 01:16:41 +05:30
9f8852572e
Create alibaba-mongoshake-unauth.yaml
2021-06-01 10:53:26 +00:00
cf0a3f69c6
Update kubernetes-pods.yaml
2021-05-27 02:45:50 +05:30
8d65ab7958
Update exposed-docker-api.yaml
2021-05-27 02:44:54 +05:30
da49c78c7c
Update docker-registry.yaml
2021-05-27 02:44:33 +05:30
0ed9fe6fa3
Update misconfigured-docker.yaml
2021-05-27 02:42:11 +05:30
6e23c0c207
Merge pull request #1528 from projectdiscovery/DhiyaneshGeek/master
...
Dhiyanesh geek/master
2021-05-24 01:28:15 +05:30
8a182ff0cc
misc changes
2021-05-24 01:26:48 +05:30
22812d2112
Create cx-cloud-upload-detect.yaml
2021-05-23 17:07:30 +05:30
c83785f916
Update server-status-localhost.yaml
...
OCD
2021-05-22 13:46:31 -05:00
7499faff02
Create kubeflow-dashboard-unauth.yaml
2021-05-22 20:05:32 +05:30
4fc7bd61fe
Create pinpoint-unauth.yaml
2021-05-22 20:01:28 +05:30
a1c283da87
Update java-melody-exposed.yaml
2021-05-21 15:42:46 +02:00
8e5255c407
updated tags
...
The affected technology is JavaMelody - the given services in the tag help to mitigate the problem, however are not the affected technology themselves.
Ref: https://www.acunetix.com/vulnerabilities/web/javamelody-publicly-accessible/
2021-05-21 15:42:29 +02:00
842d62bb40
Create springboot-beans.yaml
2021-05-20 01:39:21 +05:30
aabf384e39
Update springboot-httptrace.yaml
...
It can be accessed via a path like /httptrace also.
2021-05-19 12:36:42 +05:30
0f13cd506c
misc changes
2021-05-16 21:04:58 +05:30
b01fc7c9d7
Create tensorflow-unauth.yaml
2021-05-16 18:34:43 +05:30
5488370527
Handling edge cases
2021-05-16 15:19:19 +05:30
ffe61049e7
Merge pull request #1465 from geeknik/patch-92
...
Create apache-filename-brute-force.yaml
2021-05-14 21:24:21 +05:30
3203754361
Workflow and tags update
2021-05-14 19:37:13 +05:30
450254cd3d
Adding "max-size" to avoid timeout error due to response size
2021-05-14 19:22:08 +05:30
92c742a890
severity updates
2021-05-14 18:55:06 +05:30
f5771466c1
Update apache-filename-brute-force.yaml
2021-05-12 20:31:52 +00:00
00af677408
Create apache-filename-brute-force.yaml
2021-05-12 20:30:15 +00:00
27ed8be9dd
Merge pull request #1444 from DhiyaneshGeek/master
...
PHP Debug bar,SAP Directory Listing,Unauthenticated Netdata,Zippkin Unauth
2021-05-11 23:07:35 +05:30
915501175a
file updates
2021-05-11 21:14:40 +05:30
5b102e02ef
Improved matcher
2021-05-11 21:12:10 +05:30
a854fec546
Improved matcher
2021-05-11 21:09:56 +05:30
f495d36958
minor update
2021-05-09 20:36:52 +05:30
252e4dc2fa
Adding cloudflare-image-ssrf
2021-05-09 20:26:24 +05:30
a53286b201
Create zippkin-unauth.yaml
2021-05-09 12:47:14 +05:30
8093e13f63
Create sap-directory-listing.yaml
2021-05-09 12:20:03 +05:30
ab93cda4ae
Create unauth-netdata.yaml
2021-05-09 11:47:58 +05:30
c062651789
minor update
2021-05-07 14:41:52 +05:30
103df33af8
Create exposed-kafdrop.yaml
2021-05-06 00:23:22 +05:30
b10918510c
Adding strict matcher
2021-05-05 17:39:31 +05:30
500ce9544b
Merge pull request #1411 from geeknik/patch-82
...
Create nginx-vhost-traffic-status.yaml
2021-05-05 14:29:26 +05:30
e0c99aea6a
misc changes
2021-05-05 14:28:46 +05:30
399fc675a6
improved matcher
2021-05-04 16:32:53 +05:30
20a67faa4a
Description
2021-05-02 09:13:37 +03:00
c5f24e5692
misc updates
2021-04-28 15:50:24 +05:30
269cc168c5
Improved matcher
2021-04-28 15:13:16 +05:30
06c5cd45fa
minor update
2021-04-27 16:13:28 +05:30
d9c8057fe2
Create aem-login-status.yaml
2021-04-26 22:09:26 +05:30
21cf3a8e27
Create aem-bg-servlet.yaml
2021-04-26 22:08:54 +05:30
d59cf643a9
Create spidercontrol-scada-server-info.yaml
2021-04-24 17:22:22 +00:00
17d556feeb
Create unauthenticated-popup-upload.yaml
2021-04-22 02:11:41 +05:30
4637798845
Merge pull request #1196 from notsoevilweasel/add-laravel-debug
...
Added new check for Laravel debug mode enabled.
2021-04-18 21:14:27 +05:30
acdad9f812
tags and name update
2021-04-18 21:11:40 +05:30
8c791c59dd
moving files around
2021-04-17 22:25:22 +05:30
11e515daad
Update drupal-user-enum-ajax.yaml
2021-04-17 22:23:49 +05:30
fd15b5e030
Update seeyon-unauth.yaml
2021-04-17 20:59:30 +05:30
6dff922033
Improved path
2021-04-17 19:05:45 +05:30
8338edcb59
Update java-melody-exposed.yaml
...
Fix trailing whitespace
2021-04-14 18:19:31 +02:00
70fa457a16
Update java-melody-exposed.yaml
...
Add description, references and tags
2021-04-14 18:15:35 +02:00
5aa52a1760
Rename phpMyAdmin-setup.yaml to phpmyadmin-setup.yaml
2021-04-14 17:49:18 +05:30
e9b036a4f7
duplicate of CVE-2009-1151
2021-04-14 17:48:33 +05:30
829ab1e3a6
Update sonarqube-public-projects.yaml
2021-04-14 15:58:18 +05:30
baf3132a71
Update sonarqube-public-projects.yaml
2021-04-14 15:54:40 +05:30
a5977604a4
Added sonarqube-public-projects
2021-04-14 15:49:06 +05:30
e0387a7c5d
typo
2021-04-14 13:48:46 +05:30
c604dc07d7
Update aem-userinfo-servlet.yaml
2021-04-14 02:01:02 +05:30
e049fd7281
Merge pull request #1273 from DhiyaneshGeek/master
...
7 AEM new Templates and AEM workflow added
2021-04-14 01:29:42 +05:30
88037019ce
Minor improvements
2021-04-14 01:24:00 +05:30
c329b35af2
Update aem-gql-servlet.yaml
...
Mades some changes in matcher to reduce false positive
2021-04-13 14:45:17 +05:30
88633dd011
Create aem-wcm-suggestions-servlet.yaml
2021-04-13 14:20:43 +05:30
ea51a4f891
Create aem-userinfo-servlet.yaml
2021-04-13 14:20:14 +05:30
2a7cc19767
Create aem-merge-metadata-servlet.yaml
2021-04-13 14:19:49 +05:30
ac72ee76a9
Create aem-querybuilder-json-servlet.yaml
2021-04-13 14:19:23 +05:30
8efb2cf408
Create aem-gql-servlet.yaml
2021-04-13 14:18:59 +05:30
d0af9ae01e
Create aem-default-get-servlet.yaml
2021-04-13 14:18:34 +05:30
295ae55058
Create aem-querybuilder-feed-servlet.yaml
2021-04-13 14:17:44 +05:30
1c59b2e7f6
Update seeyon-unauth.yaml
2021-04-13 06:17:52 +00:00
397eca6945
Create seeyon-unauth.yaml
2021-04-13 05:44:44 +00:00
0d85374b64
Update unautneicated-cache-purge.yaml
2021-04-11 21:13:24 +05:30
bae3ee19e6
template update
2021-04-11 20:50:42 +05:30
9a4d880b88
Update aws-object-listing.yaml
2021-04-07 17:45:49 +05:30
76dcebcf85
Added AWS Bucket Object listing detection
2021-04-07 17:45:12 +05:30
0db4abb862
Added word matchers
2021-04-07 06:22:28 +12:00
c19ad562fc
lint fix
2021-04-06 14:20:26 +05:30
8fdfc64e54
misc tag updates
2021-04-06 12:16:11 +05:30
7427eb2e50
Merge pull request #1204 from DhiyaneshGeek/master
...
AEM internal File read
2021-04-05 23:56:20 +05:30
d34ca6773b
misc changes
2021-04-05 23:55:18 +05:30
a73d7f855c
Merge pull request #1200 from pikpikcu/patch-138
...
Create gitlab-infoleak
2021-04-05 23:46:11 +05:30
a0d6838672
Minor updates and Gitlab workflow
2021-04-05 23:45:14 +05:30
a395f7cd60
Create aem-querybuilder-internal-path-read.yaml
2021-04-05 23:12:25 +05:30
477a783790
Added aem-jcr-querybuilder
2021-04-05 22:45:48 +05:30
db580f47c8
Update aem-hash-querybuilder.yaml
2021-04-05 22:37:57 +05:30
ab1a3a2e4d
matcher update
2021-04-05 22:36:51 +05:30
0622a53cfc
moving files around
2021-04-05 22:18:31 +05:30
e00521bb3a
Update aem-hash-querybuilder.yaml
2021-04-05 18:47:02 +05:30
6001b0680a
Update aem-hash-querybuilder.yaml
2021-04-05 18:45:09 +05:30
78813c6858
Update aem-hash-querybuilder.yaml
2021-04-05 18:44:00 +05:30
20450a808b
Update aem-hash-querybuilder.yaml
2021-04-05 18:42:41 +05:30
21d72cd017
Create aem-hash-querybuilder.yaml
2021-04-05 18:40:29 +05:30
1b0cb16b08
Added new check for Laravel debug mode enabled. Current one in repo doesn\'t work
2021-04-04 10:52:49 +12:00
5e1302377d
Update phpMyAdmin-setup.yaml
2021-04-01 13:46:56 +05:30
981103545a
minor updates
2021-04-01 13:45:12 +05:30
075451bdab
Create phpMyAdmin-setup.yaml
...
Check phpMyAdmin setup page
2021-04-01 13:15:18 +05:30
bf359a6ee4
Update put-method-enabled.yaml
2021-03-26 17:56:04 +05:30
e60c7453b8
Updating gitlab-public-snippets
2021-03-25 19:28:05 +05:30
351167e91f
removing redundant boolean check
2021-03-25 00:28:50 +01:00
3252d3c5d3
Update gitlab-public-signup.yaml
2021-03-23 04:03:38 +05:30
a9d97b16b2
Adding public gitlab signups
2021-03-23 03:52:19 +05:30
c686b26b02
misc changes
2021-03-21 20:24:45 +05:30
754407699a
Create exposed-sqlite-manager.yaml
2021-03-20 20:47:20 +05:30
fc0c050127
Update gitlab-snippets.yaml
2021-03-18 11:09:58 +03:00
ad84ecb792
tag improvements
2021-03-18 13:24:36 +05:30
6288ad8275
moving files around
2021-03-17 15:55:11 +05:30
39f495cd98
Merge pull request #1093 from DhiyaneshGeek/master
...
ePMP 2000 Login , Pandora FMS Console , ContaCam , HP LaserJet
2021-03-17 15:53:26 +05:30
a8a09a3c44
Create hp-laserjet-detect.yaml
2021-03-16 22:20:51 +05:30
9ac8e36094
Moving few templates under IOT
2021-03-16 22:17:55 +05:30
6b950424ee
Create contacam.yaml
2021-03-16 22:06:54 +05:30
6fbc7cf353
Create panasonic-network-management.yaml
2021-03-15 11:51:25 +05:30
ce41df0bfb
Update gitlab-snippets.yaml
...
exclude empty snippets page
2021-03-12 19:01:24 +03:00
f012eba951
adding tags to misconfiguration
2021-03-12 14:27:14 +05:30
952eec228a
moving files around
2021-03-12 13:40:33 +05:30
51faee82ff
Update gitlab-public-repos.yaml
2021-03-12 12:28:45 +05:30
2a50c876f8
Added gitlab-public-repos
2021-03-11 23:45:35 -05:00
a88453a932
Fix comments-indentation linter
2021-03-11 23:16:43 +07:00
d3ee173ade
Adding updated syntax
2021-03-11 19:47:22 +05:30
152957b3a6
Update http-etcd-unauthenticated-api-data-leak.yaml
2021-03-09 14:34:36 +05:30
22d8c53714
Create http-etcd-unauthenticated-api-data-leak.yaml
2021-03-09 01:38:32 +05:30
e4c22f147e
Create solr-query-dashboard.yaml
2021-03-07 19:16:57 +05:30
f13243b743
Create unauthenticated-mongo-express.yaml
2021-03-07 19:16:30 +05:30
2f328cecd2
Added gitlab-snippets
2021-03-07 18:50:45 +05:30
74e63203b7
Update d-link-arbitary-fileread.yaml
2021-03-02 21:14:29 +05:30
85126a1a84
Create d-link-arbitary-fileread.yaml
2021-03-02 19:39:19 +05:30
66f9dc25f7
Create zhiyuan-oa-unauthorized.yaml
2021-03-02 00:20:55 +00:00
214d6899f0
Rename phpmyadmin-wooYun.yaml to phpmyadmin-wooyun.yaml
2021-02-27 17:55:59 +05:30
bf798cda41
Update phpmyadmin-wooYun.yaml
2021-02-27 14:21:07 +05:30
0723b21963
Create phpmyadmin-wooYun.yaml
2021-02-26 23:56:21 +05:30
c916f5f306
Merge pull request #955 from pikpikcu/patch-87
...
Update unauthenticated-nacos-access.yaml
2021-02-26 11:15:39 +05:30
892c25e4d0
Update unauthenticated-nacos-access.yaml
2021-02-26 11:14:18 +05:30
b05c058a56
Update unauthenticated-nacos-access.yaml
2021-02-26 01:56:25 +00:00
82fa1598cf
Update unauthenticated-airflow.yaml
2021-02-26 00:47:11 +00:00
d9c42a9c61
Removing duplicate template
2021-02-24 22:58:13 +05:30
e66eb0fdc3
misc changes
2021-02-24 22:55:41 +05:30
8cc50e8881
Update ups-status.yaml
2021-02-24 12:45:19 +05:30
fbb02de2a1
Update ups-status.yaml
2021-02-24 12:40:54 +05:30
67f92df712
Update webalizer-statistics-exposed.yaml
2021-02-24 12:23:48 +05:30
dbc65c59b4
Update webalizer-statistics-exposed.yaml
2021-02-24 12:22:03 +05:30
4a51398426
Update webalizer-statistics-exposed.yaml
2021-02-24 12:13:16 +05:30
1727b923be
Create webalizer-statistics-exposed.yaml
2021-02-24 12:07:08 +05:30
128d2cb205
Create ups-status.yaml
2021-02-24 12:06:29 +05:30
cc963db47f
Create tcpconfig.yaml
2021-02-24 12:06:02 +05:30
68c7a957b4
Create java-melody-exposed.yaml
2021-02-24 12:05:37 +05:30
fc163a4dad
Create haproxy-status.yaml
2021-02-24 12:05:05 +05:30
bff0e4c132
Update horde-unauthenticated.yaml
2021-02-23 14:03:44 +05:30
3ae4fced09
Create horde-unauthenticated.yaml
2021-02-23 08:07:05 +00:00
554de94ffe
Fixing weak matcher
2021-02-14 23:21:42 +05:30
45f694228c
Update unauthenticated-prtg.yaml
2021-02-13 19:30:20 +05:30
dd7b29885f
Update jboss-status.yaml
2021-02-13 16:38:00 +05:30
0b32b3ef8f
Create unauthenticated-prtg.yaml
2021-02-13 13:02:16 +05:30
d180b4eb63
Create mikrotik-graph.yaml
2021-02-13 13:00:49 +05:30
fb392d44d9
Create jboss-status.yaml
2021-02-13 12:59:31 +05:30
44fbc886e0
misc changes
2021-02-10 20:37:28 +05:30
01dde0e3f4
Update misconfigured-docker.yaml
2021-02-10 16:47:48 +05:30
380b4e68f5
Fix front-page-misconfig ( #826 )
2021-02-08 19:34:29 +05:30
064ff876e8
Update nginx-status.yaml ( #818 )
2021-02-07 19:05:49 +05:30
00d26c0608
Added tags to cves 😎 ( #813 )
...
* Added tags to cves 😎
2021-02-06 01:14:41 +05:30
32be639b5f
Update misconfigured-docker.yaml
2021-02-04 00:01:47 +05:30
2dd821bd18
Update misconfigured-docker.yaml
2021-02-03 23:59:33 +05:30
1d8ed33ebb
Update misconfigured-docker.yaml
2021-02-03 23:57:24 +05:30
c5ab6a9a3f
Create misconfigured-docker.yaml
2021-02-03 23:48:23 +05:30
d623fc14fa
Delete misconfigured-docker.yaml
2021-02-03 23:37:02 +05:30
061ce35b34
Update misconfigured-docker.yaml
2021-02-03 23:28:19 +05:30
f46ae21079
Create misconfigured-docker.yaml
2021-02-03 23:23:05 +05:30
aad1cc2924
Update salesforce-aura-misconfig.yaml
2021-01-31 15:51:25 +05:30
064f084dee
misc changes
2021-01-29 23:53:50 +05:30
675c576b86
Merge pull request #757 from wdahlenburg/split_spring_boot_detect
...
Split up springboot-detect
2021-01-29 00:07:17 +05:30
40e1df8493
few fixes
2021-01-29 00:06:15 +05:30
663de70127
workflow updates
2021-01-28 23:47:22 +05:30
225aae6bb8
Delete springboot-detect.yaml
2021-01-28 23:30:34 +05:30
2fd6ae31cb
Delete springboot-logfile.yaml
2021-01-28 23:27:15 +05:30
21bfead0b1
renaming few templates
2021-01-28 23:13:50 +05:30
a9c9809283
Adding springboot-detect-logfile
2021-01-28 21:35:48 +05:30
0eee24b932
Adding springboot-detect-loggers
2021-01-28 21:26:38 +05:30
c762044d29
updating incorrect file permissions
2021-01-21 23:28:32 +05:30
a922262352
moving files around
2021-01-21 20:31:16 +05:30
4e5b984ab5
Create php-fpm-status.yaml
...
Examples can be found at https://www.shodan.io/search?query=PHP-FPM+Status
More information can be found at https://rtcamp.com/tutorials/php/fpm-status-page/
2021-01-21 14:49:05 +00:00
bbf0d42cf9
Split springboot-detect into individual templates with appropriate severities and matchers
2021-01-14 10:09:23 -06:00
dc24595935
BaseURL updates
2021-01-14 20:11:56 +05:30
106da77fc3
Preparing for request clustering
2021-01-13 13:01:46 +05:30
1468d8a52c
matcher updates
2021-01-11 12:14:22 +05:30
d69ce217e8
fixes
2021-01-11 04:50:14 +05:30
b5dd30abf5
fixes
2021-01-11 04:09:54 +05:30
f2f7ada0ff
few more updates
2021-01-10 19:46:50 +05:30
a52ffe5c4e
fixes and updates
2021-01-10 19:45:36 +05:30
a90d047991
Massive template checks addition 🎉 🎉
2021-01-10 18:41:25 +05:30
187e4a5feb
moving more files around
2021-01-09 18:32:04 +05:30
95d784d9b7
moving folder/files around
2021-01-08 22:25:54 +05:30
21ea71e4c1
moving to new directory structure
2021-01-08 17:11:53 +05:30
Will Davison
Prince Chaddha
sandeep
Dhiyaneshwaran
Sandeep Singh
Philippe Delteil
PikPikcU
Geeknik Labs
TheConciergeDev
Ajaysen R
Noam Rathaus
Techbrunch
notsoevilweasel
Naveen J
Mzack9999
savik
Louis Dion-Marcil
Dwi Siswanto
sandeep
Binit Ghimire
Wyatt Dahlenburg