daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
14,899 Commits
17 Branches
0 Tags
160 MiB
Commit Graph

542 Commits (0ba859bda50b100d0e59f76a02ecb85bc8f62ad9)

Author SHA1 Message Date
pussycat0x ed8ba1451d
Update springboot-metrics.yaml 2021-08-04 22:17:33 +05:30
pussycat0x cb63ec5176
Update springboot-dump.yaml 2021-08-04 22:17:01 +05:30
pussycat0x 4715314c2b
Add files via upload 2021-08-04 22:08:47 +05:30
sandeep 89ce8da31c template update 2021-08-02 16:10:05 +05:30
Sandeep Singh ee06aea64d
Merge pull request #2262 from DhiyaneshGeek/master 
New Template
 2021-07-31 22:50:25 +05:30
sandeep 83a1769c04 Added Open Akamai ARL XSS Detection 2021-07-31 00:53:25 +05:30
Sandeep Singh 918a6deead
Merge pull request #2265 from pussycat0x/master 
zabbix-dashboards-access
 2021-07-30 02:37:02 +05:30
sandeep 6b02fb31ed updated matcher 2021-07-30 02:33:01 +05:30
pussycat0x 3caeca71ab
Add files via upload 2021-07-29 23:36:59 +05:30
Dhiyaneshwaran c8e11b8254
Create viewpoint-system-status.yaml 2021-07-29 19:08:40 +05:30
Prince Chaddha c49a4b32f1
Update android-debug-database-exposed.yaml 2021-07-29 10:47:01 +05:30
Dhiyaneshwaran 9f93ea0eba
Update android-debug-database-exposed.yaml 2021-07-28 21:37:19 +05:30
socketz 71a27da891 Added security headers templates 2021-07-28 14:40:20 +02:00
Dhiyaneshwaran bbc34b011b
Create android-debug-database-exposed.yaml 2021-07-28 17:46:31 +05:30
sandeep 1b437d300a Additional matcher for Symfony debug mode 2021-07-26 17:21:46 +05:30
sandeep bfd40054e4 matcher update 2021-07-26 15:18:10 +05:30
Pham Sy Minh 934d899f5e
Reduce false positives 2021-07-26 12:53:34 +07:00
Sandeep Singh a57bcda074
Merge pull request #2111 from pikpikcu/patch-203 
Update hadoop-unauth.yaml
 2021-07-26 01:35:34 +05:30
sandeep 3fc8626874 Update hadoop-unauth.yaml 2021-07-26 01:33:02 +05:30
Sandeep Singh b905a91cdc
Merge pull request #2129 from geeknik/patch-6 
Update shell-history.yaml
 2021-07-26 01:08:46 +05:30
sandeep bb8a22401b Separating service detection + SSRF detection 2021-07-25 15:22:09 +05:30
Pham Sy Minh cff60a04b5
Fix false positive 2021-07-25 12:14:24 +07:00
sandeep 6ccc5f8792 matcher update to handle edge cases 2021-07-25 03:05:55 +05:30
Sandeep Singh 4b444af3c4
Merge pull request #2125 from DhiyaneshGeek/master 
17 New Templates Added
 2021-07-24 03:26:09 +05:30
sandeep b1d8ab1193 more matchers update 2021-07-24 03:13:09 +05:30
Sandeep Singh 327819a037
Update misconfiguration/clockwork-dashboard-exposure.yaml 
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
 2021-07-24 00:52:24 +05:30
Sandeep Singh f8a1c2c2b5
Update misconfiguration/clockwork-dashboard-exposure.yaml 
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
 2021-07-24 00:52:09 +05:30
Prince Chaddha 1754aecb5e
Update wamp-server-configuration.yaml 2021-07-22 17:54:19 +05:30
Geeknik Labs d354d50bb9
Update shell-history.yaml 
fix false positive
 2021-07-21 12:26:20 -05:00
Prince Chaddha ff374372e0
Update clockwork-dashboard-exposure.yaml 2021-07-21 17:23:40 +05:30
Dhiyaneshwaran c9852b62dd
Create clockwork-dashboard-exposure.yaml 2021-07-21 11:02:36 +05:30
PikPikcU 9c8e154b5a
Update hadoop-unauth.yaml 2021-07-20 19:29:10 +07:00
Dhiyaneshwaran 525ffdefcc
Update unauthenticated-popup-upload.yaml 2021-07-15 13:52:06 +05:30
sandeep 6dd92167eb minor updates 2021-07-13 19:35:58 +05:30
Dhiyaneshwaran 4822208487
Merge pull request #71 from projectdiscovery/master 
Updation
 2021-07-13 14:54:00 +05:30
Dhiyaneshwaran 51d6477505
Create unauthenticated-alert-manager.yaml 2021-07-13 14:10:37 +05:30
Sandeep Singh 920255635b
Merge pull request #1876 from pussycat0x/master 
web-ftp
 2021-07-13 01:53:15 +05:30
Sandeep Singh 8ec1767561
Rename hp-printer-unanuthorized-access.yaml to unauthorized-hp-printer.yaml 2021-07-13 01:45:40 +05:30
sandeep 567096e97f matcher update 2021-07-13 01:42:15 +05:30
sandeep 3b13abc7f2 matcher update 2021-07-13 01:30:58 +05:30
pussycat0x 647677f0ab
Update hp-printer-unanuthorized-access.yaml 2021-07-11 23:49:17 +05:30
pussycat0x 09b002134d
Add files via upload 2021-07-11 23:44:34 +05:30
Sandeep Singh 22421fd38e
Merge pull request #1843 from DhiyaneshGeek/master 
Update AEM CRX bypass , AEM Debug XSS and Java sean debug page, Jetty showcontexts enable , jfrog-unauth-build-exposed Templates Added
 2021-07-04 01:23:20 +05:30
sandeep afcbe4cfe4 minor updates 2021-07-04 01:22:08 +05:30
sandeep a5f8175017 Update unauthorized-plastic-scm.yaml 2021-07-03 16:39:59 +05:30
sandeep 5d7388f0ae Added Unauthorized Access to Plastic Admin Console 2021-07-03 16:37:11 +05:30
Dhiyaneshwaran 31a10ebfb7
Update jetty-showcontexts-enable.yaml 2021-07-02 20:50:15 +05:30
sandeep 5b91ef07a6 Update unauthenticated-glances.yaml 2021-07-02 17:15:32 +05:30
sandeep db61d85e75 minor updates 2021-07-02 17:14:03 +05:30
Dhiyaneshwaran 5f779266bc
Create jetty-showcontexts-enable.yaml 2021-07-02 08:16:57 +05:30
Dhiyaneshwaran 39eb91a582
Update aem-crx-bypass.yaml 2021-07-01 22:23:08 +05:30
Petko D. Petkov 7c39ab8c79 Check if json. 2021-06-30 12:03:47 +00:00
sandeep e8ffd4ea06 Update aem-crx-bypass.yaml 2021-06-28 20:45:41 +05:30
sandeep eaa5d7600f Added more strict matchers 2021-06-28 20:44:24 +05:30
Dhiyaneshwaran e53b262283
Update aem-crx-bypass.yaml 2021-06-28 20:23:11 +05:30
Dhiyaneshwaran 91b673ad17
Create aem-crx-bypass.yaml 2021-06-28 20:20:58 +05:30
sandeep 2a7d45fa1f more strict matcher 2021-06-26 19:42:11 +05:30
Prince Chaddha 89b4fdf8ed
Merge pull request #1757 from pussycat0x/master 
New template added
 2021-06-24 02:02:42 +05:30
Prince Chaddha 5fa51dd043
Update phpmyadmin-sql.php-server.yaml 2021-06-24 01:26:51 +05:30
sandeep 134a23aeab Some fixes (WIP) 
- Added missing matcher condition
- Updated severity to lowercase, as it's case sensitive
 2021-06-24 01:03:41 +05:30
pussycat0x 2dd0ce2664
Update phpmyadmin-sql.php-server.yaml 2021-06-23 21:37:14 +05:30
pussycat0x 5ae899a66f
Update phpmyadmin-sql.php-server.yaml 2021-06-23 21:34:13 +05:30
pussycat0x bb251938c8
Add files via upload 2021-06-22 20:40:53 +05:30
sandeep 49f9b67827 Added reference 2021-06-20 16:39:47 +05:30
Prince Chaddha bd4b43bbce
Merge pull request #995 from pikpikcu/patch-101 
Create zhiyuan-oa-unauthorized
 2021-06-19 12:53:24 +05:30
Prince Chaddha 5463655627
Update zhiyuan-oa-unauthorized.yaml 2021-06-19 12:52:35 +05:30
sandeep f0b67ef56b Few template updates 2021-06-18 15:53:49 +05:30
sandeep 6081edd83f Added reference 2021-06-18 12:16:27 +05:30
sandeep f9d068a105 Added ssrf-via-oauth-misconfig 2021-06-18 12:15:13 +05:30
sandeep b1e401ff9c Delete adobe-connect-xss.yaml 2021-06-15 15:54:19 +05:30
sandeep 891e8374b1 misc changes 2021-06-14 20:32:21 +05:30
Dhiyaneshwaran 629b655ef1
Create adobe-connect-xss.yaml 2021-06-13 23:54:48 +05:30
Dhiyaneshwaran afec528d82
Create adobe-connect-version.yaml 2021-06-13 23:40:58 +05:30
Dhiyaneshwaran 6e727805c1
Create adobe-connect-username-exposure.yaml 2021-06-13 23:25:39 +05:30
sandeep 8d35960831 Strict matchers 2021-06-10 21:18:38 +05:30
Sandeep Singh 13090ace75
Merge pull request #1659 from WillD96/IIS-Internal-IP-Disclosure 
Created IIS Internal IP Disclosure Template
 2021-06-10 00:02:02 +05:30
r3naissance aa9e899dd2
Added conditional word in body 
I found this be a valid finding /actuator/env on a production host but was missing additional words to check which was causing a false negative. 'activeProfiles' allows this test to pass on the instance that I came across.
 2021-06-09 11:36:54 -06:00
sandeep 3c6aa9da0c misc updates 2021-06-09 22:15:55 +05:30
Will Davison cd06c6137f Fixed trailing spaces 2021-06-09 16:04:53 +01:00
Will Davison ad8d064bf9 Fixed linting error. 2021-06-09 15:40:06 +01:00
Will Davison 6279e1fb70 Added template for IIS Internal IP Disclosure 
By sending a HTTP 1.0 request to the root of the webserver, sometimes an internal IP address is disclosed in the Location header of the 302 response.
 2021-06-09 15:30:59 +01:00
Prince Chaddha 83ce809e8d Updated author names 2021-06-09 17:50:56 +05:30
Prince Chaddha 0013f94807
Merge pull request #1631 from projectdiscovery/sap_update 
SAP NetWeaver update
 2021-06-09 14:17:51 +05:30
sandeep 1851068721 Updated matcher 2021-06-08 00:33:06 +05:30
sandeep 0fe0d327b0 moving files around 2021-06-07 19:57:59 +05:30
Dhiyaneshwaran 52adac2e12
Create firebase-urls.yaml 2021-06-06 19:38:51 +05:30
Dhiyaneshwaran 158914d4db
Create artifactory-anonymous-deploy.yaml 2021-06-06 19:37:32 +05:30
Prince Chaddha 1d07ace8a5
Merge pull request #1634 from DhiyaneshGeek/master 
Exposed jQuery File Upload
 2021-06-06 17:58:25 +05:30
Prince Chaddha 6649abf131
Update exposed-jquery-file-upload.yaml 2021-06-06 17:55:05 +05:30
Sandeep Singh fae9755374
Merge pull request #1639 from pdelteil/patch-9 
Update shell-history.yaml
 2021-06-06 13:40:47 +05:30
sandeep 0cf8ffdc57 misc changes 2021-06-06 13:39:16 +05:30
sandeep e2eaedc6a1 misc updates 2021-06-06 13:19:01 +05:30
Philippe Delteil 652da29f9a
Update shell-history.yaml 
There are two problems with this template, it only checks for chmod commands but most importantly doesn't check for html tags. A real history file the response doesn't include html tags at all. 

So, I'm adding two rules: Check for another possible commands (from real example) and adding a negative rule to discard false positives like this one:

nuclei -debug -t /home/kali/nuclei-templates/misconfiguration/shell-history.yaml -u http://777.urbanup.com
 2021-06-05 22:06:30 -04:00
Philippe Delteil 9014a4b0a2
Update aws-object-listing.yaml 
Added extractor that retrieves the name of the s3 bucket. 

Test
nuclei -t nuclei-templates/misconfiguration/aws-object-listing.yaml -u http://img.secnews.gr


[2021-06-06 01:19:10] [aws-object-listing] [http] [low] http://imgcdn.secnews.gr [img.secnews.gr]
 2021-06-05 21:27:44 -04:00
Dhiyaneshwaran 0d82660f90
Create exposed-jquery-file-upload.yaml 2021-06-05 22:04:09 +05:30
sandeep a85c1dd35a Moving files around + duplicate remove 2021-06-05 15:57:13 +05:30
sandeep ae8c130668 Moving files around 2021-06-05 15:55:01 +05:30
sandeep edcc35d604 Added Private key exposure via helper detector 2021-06-04 20:46:19 +05:30
sandeep 0c436e35aa Added airflow-debug 2021-06-03 19:39:51 +05:30
sandeep 0c4f75d3ad Duplicate template 2021-06-03 18:44:50 +05:30
sandeep bdc803fd4b Added CVE-2020-13927 2021-06-03 14:23:34 +05:30
Prince Chaddha f63cd48c79
Update alibaba-mongoshake-unauth.yaml 2021-06-02 01:16:41 +05:30
PikPikcU 9f8852572e
Create alibaba-mongoshake-unauth.yaml 2021-06-01 10:53:26 +00:00
Prince Chaddha cf0a3f69c6
Update kubernetes-pods.yaml 2021-05-27 02:45:50 +05:30
Prince Chaddha 8d65ab7958
Update exposed-docker-api.yaml 2021-05-27 02:44:54 +05:30
Prince Chaddha da49c78c7c
Update docker-registry.yaml 2021-05-27 02:44:33 +05:30
Prince Chaddha 0ed9fe6fa3
Update misconfigured-docker.yaml 2021-05-27 02:42:11 +05:30
Sandeep Singh 6e23c0c207
Merge pull request #1528 from projectdiscovery/DhiyaneshGeek/master 
Dhiyanesh geek/master
 2021-05-24 01:28:15 +05:30
sandeep 8a182ff0cc misc changes 2021-05-24 01:26:48 +05:30
Dhiyaneshwaran 22812d2112
Create cx-cloud-upload-detect.yaml 2021-05-23 17:07:30 +05:30
Geeknik Labs c83785f916
Update server-status-localhost.yaml 
OCD
 2021-05-22 13:46:31 -05:00
Dhiyaneshwaran 7499faff02
Create kubeflow-dashboard-unauth.yaml 2021-05-22 20:05:32 +05:30
Dhiyaneshwaran 4fc7bd61fe
Create pinpoint-unauth.yaml 2021-05-22 20:01:28 +05:30
TheConciergeDev a1c283da87
Update java-melody-exposed.yaml 2021-05-21 15:42:46 +02:00
TheConciergeDev 8e5255c407
updated tags 
The affected technology is JavaMelody - the given services in the tag help to mitigate the problem, however are not the affected technology themselves. 

Ref: https://www.acunetix.com/vulnerabilities/web/javamelody-publicly-accessible/
 2021-05-21 15:42:29 +02:00
Ajaysen R 842d62bb40
Create springboot-beans.yaml 2021-05-20 01:39:21 +05:30
Ajaysen R aabf384e39
Update springboot-httptrace.yaml 
It can be accessed via a path like /httptrace also.
 2021-05-19 12:36:42 +05:30
sandeep 0f13cd506c misc changes 2021-05-16 21:04:58 +05:30
Dhiyaneshwaran b01fc7c9d7
Create tensorflow-unauth.yaml 2021-05-16 18:34:43 +05:30
sandeep 5488370527 Handling edge cases 2021-05-16 15:19:19 +05:30
Sandeep Singh ffe61049e7
Merge pull request #1465 from geeknik/patch-92 
Create apache-filename-brute-force.yaml
 2021-05-14 21:24:21 +05:30
sandeep 3203754361 Workflow and tags update 2021-05-14 19:37:13 +05:30
sandeep 450254cd3d Adding "max-size" to avoid timeout error due to response size 2021-05-14 19:22:08 +05:30
sandeep 92c742a890 severity updates 2021-05-14 18:55:06 +05:30
Geeknik Labs f5771466c1
Update apache-filename-brute-force.yaml 2021-05-12 20:31:52 +00:00
Geeknik Labs 00af677408
Create apache-filename-brute-force.yaml 2021-05-12 20:30:15 +00:00
Sandeep Singh 27ed8be9dd
Merge pull request #1444 from DhiyaneshGeek/master 
PHP Debug bar,SAP Directory Listing,Unauthenticated Netdata,Zippkin Unauth
 2021-05-11 23:07:35 +05:30
sandeep 915501175a file updates 2021-05-11 21:14:40 +05:30
sandeep 5b102e02ef Improved matcher 2021-05-11 21:12:10 +05:30
sandeep a854fec546 Improved matcher 2021-05-11 21:09:56 +05:30
sandeep f495d36958 minor update 2021-05-09 20:36:52 +05:30
sandeep 252e4dc2fa Adding cloudflare-image-ssrf 2021-05-09 20:26:24 +05:30
Dhiyaneshwaran a53286b201
Create zippkin-unauth.yaml 2021-05-09 12:47:14 +05:30
Dhiyaneshwaran 8093e13f63
Create sap-directory-listing.yaml 2021-05-09 12:20:03 +05:30
Dhiyaneshwaran ab93cda4ae
Create unauth-netdata.yaml 2021-05-09 11:47:58 +05:30
sandeep c062651789 minor update 2021-05-07 14:41:52 +05:30
Dhiyaneshwaran 103df33af8
Create exposed-kafdrop.yaml 2021-05-06 00:23:22 +05:30
sandeep b10918510c Adding strict matcher 2021-05-05 17:39:31 +05:30
Sandeep Singh 500ce9544b
Merge pull request #1411 from geeknik/patch-82 
Create nginx-vhost-traffic-status.yaml
 2021-05-05 14:29:26 +05:30
sandeep e0c99aea6a misc changes 2021-05-05 14:28:46 +05:30
sandeep 399fc675a6 improved matcher 2021-05-04 16:32:53 +05:30
Noam Rathaus 20a67faa4a Description 2021-05-02 09:13:37 +03:00
sandeep c5f24e5692 misc updates 2021-04-28 15:50:24 +05:30
sandeep 269cc168c5 Improved matcher 2021-04-28 15:13:16 +05:30
sandeep 06c5cd45fa minor update 2021-04-27 16:13:28 +05:30
Dhiyaneshwaran d9c8057fe2
Create aem-login-status.yaml 2021-04-26 22:09:26 +05:30
Dhiyaneshwaran 21cf3a8e27
Create aem-bg-servlet.yaml 2021-04-26 22:08:54 +05:30
Geeknik Labs d59cf643a9
Create spidercontrol-scada-server-info.yaml 2021-04-24 17:22:22 +00:00
Dhiyaneshwaran 17d556feeb
Create unauthenticated-popup-upload.yaml 2021-04-22 02:11:41 +05:30
Sandeep Singh 4637798845
Merge pull request #1196 from notsoevilweasel/add-laravel-debug 
Added new check for  Laravel debug mode enabled.
 2021-04-18 21:14:27 +05:30
sandeep acdad9f812 tags and name update 2021-04-18 21:11:40 +05:30
sandeep 8c791c59dd moving files around 2021-04-17 22:25:22 +05:30
sandeep 11e515daad Update drupal-user-enum-ajax.yaml 2021-04-17 22:23:49 +05:30
sandeep 6dff922033 Improved path 2021-04-17 19:05:45 +05:30
Techbrunch 8338edcb59
Update java-melody-exposed.yaml 
Fix trailing whitespace
 2021-04-14 18:19:31 +02:00
Techbrunch 70fa457a16
Update java-melody-exposed.yaml 
Add description, references and tags
 2021-04-14 18:15:35 +02:00
PD-Team 5aa52a1760
Rename phpMyAdmin-setup.yaml to phpmyadmin-setup.yaml 2021-04-14 17:49:18 +05:30
sandeep e9b036a4f7 duplicate of CVE-2009-1151 2021-04-14 17:48:33 +05:30
sandeep 829ab1e3a6 Update sonarqube-public-projects.yaml 2021-04-14 15:58:18 +05:30
sandeep baf3132a71 Update sonarqube-public-projects.yaml 2021-04-14 15:54:40 +05:30
sandeep a5977604a4 Added sonarqube-public-projects 2021-04-14 15:49:06 +05:30
sandeep e0387a7c5d typo 2021-04-14 13:48:46 +05:30
sandeep c604dc07d7 Update aem-userinfo-servlet.yaml 2021-04-14 02:01:02 +05:30
PD-Team e049fd7281
Merge pull request #1273 from DhiyaneshGeek/master 
7 AEM new Templates and AEM workflow added
 2021-04-14 01:29:42 +05:30
sandeep 88037019ce Minor improvements 2021-04-14 01:24:00 +05:30
Dhiyaneshwaran c329b35af2
Update aem-gql-servlet.yaml 
Mades some changes in matcher to reduce false positive
 2021-04-13 14:45:17 +05:30
Dhiyaneshwaran 88633dd011
Create aem-wcm-suggestions-servlet.yaml 2021-04-13 14:20:43 +05:30
Dhiyaneshwaran ea51a4f891
Create aem-userinfo-servlet.yaml 2021-04-13 14:20:14 +05:30
Dhiyaneshwaran 2a7cc19767
Create aem-merge-metadata-servlet.yaml 2021-04-13 14:19:49 +05:30
Dhiyaneshwaran ac72ee76a9
Create aem-querybuilder-json-servlet.yaml 2021-04-13 14:19:23 +05:30
Dhiyaneshwaran 8efb2cf408
Create aem-gql-servlet.yaml 2021-04-13 14:18:59 +05:30
Dhiyaneshwaran d0af9ae01e
Create aem-default-get-servlet.yaml 2021-04-13 14:18:34 +05:30
Dhiyaneshwaran 295ae55058
Create aem-querybuilder-feed-servlet.yaml 2021-04-13 14:17:44 +05:30
sandeep 0d85374b64 Update unautneicated-cache-purge.yaml 2021-04-11 21:13:24 +05:30
sandeep bae3ee19e6 template update 2021-04-11 20:50:42 +05:30
sandeep 9a4d880b88 Update aws-object-listing.yaml 2021-04-07 17:45:49 +05:30
sandeep 76dcebcf85 Added AWS Bucket Object listing detection 2021-04-07 17:45:12 +05:30
notsoevilweasel 0db4abb862
Added word matchers 2021-04-07 06:22:28 +12:00
sandeep c19ad562fc lint fix 2021-04-06 14:20:26 +05:30
sandeep 8fdfc64e54 misc tag updates 2021-04-06 12:16:11 +05:30
PD-Team 7427eb2e50
Merge pull request #1204 from DhiyaneshGeek/master 
AEM internal File read
 2021-04-05 23:56:20 +05:30
sandeep d34ca6773b misc changes 2021-04-05 23:55:18 +05:30
PD-Team a73d7f855c
Merge pull request #1200 from pikpikcu/patch-138 
Create gitlab-infoleak
 2021-04-05 23:46:11 +05:30
sandeep a0d6838672 Minor updates and Gitlab workflow 2021-04-05 23:45:14 +05:30
Dhiyaneshwaran a395f7cd60
Create aem-querybuilder-internal-path-read.yaml 2021-04-05 23:12:25 +05:30
sandeep 477a783790 Added aem-jcr-querybuilder 2021-04-05 22:45:48 +05:30
sandeep db580f47c8 Update aem-hash-querybuilder.yaml 2021-04-05 22:37:57 +05:30
sandeep ab1a3a2e4d matcher update 2021-04-05 22:36:51 +05:30
sandeep 0622a53cfc moving files around 2021-04-05 22:18:31 +05:30
Dhiyaneshwaran e00521bb3a
Update aem-hash-querybuilder.yaml 2021-04-05 18:47:02 +05:30
Dhiyaneshwaran 6001b0680a
Update aem-hash-querybuilder.yaml 2021-04-05 18:45:09 +05:30
Dhiyaneshwaran 78813c6858
Update aem-hash-querybuilder.yaml 2021-04-05 18:44:00 +05:30
Dhiyaneshwaran 20450a808b
Update aem-hash-querybuilder.yaml 2021-04-05 18:42:41 +05:30
Dhiyaneshwaran 21d72cd017
Create aem-hash-querybuilder.yaml 2021-04-05 18:40:29 +05:30
Christopher Berry 1b0cb16b08 Added new check for Laravel debug mode enabled. Current one in repo doesn\'t work 2021-04-04 10:52:49 +12:00
sandeep 5e1302377d Update phpMyAdmin-setup.yaml 2021-04-01 13:46:56 +05:30
sandeep 981103545a minor updates 2021-04-01 13:45:12 +05:30
Naveen J 075451bdab
Create phpMyAdmin-setup.yaml 
Check phpMyAdmin setup page
 2021-04-01 13:15:18 +05:30
sandeep bf359a6ee4 Update put-method-enabled.yaml 2021-03-26 17:56:04 +05:30
sandeep e60c7453b8 Updating gitlab-public-snippets 2021-03-25 19:28:05 +05:30
Mzack9999 351167e91f removing redundant boolean check 2021-03-25 00:28:50 +01:00
sandeep 3252d3c5d3 Update gitlab-public-signup.yaml 2021-03-23 04:03:38 +05:30
sandeep a9d97b16b2 Adding public gitlab signups 2021-03-23 03:52:19 +05:30
sandeep c686b26b02 misc changes 2021-03-21 20:24:45 +05:30
Dhiyaneshwaran 754407699a
Create exposed-sqlite-manager.yaml 2021-03-20 20:47:20 +05:30
savik fc0c050127
Update gitlab-snippets.yaml 2021-03-18 11:09:58 +03:00
sandeep ad84ecb792 tag improvements 2021-03-18 13:24:36 +05:30
sandeep 6288ad8275 moving files around 2021-03-17 15:55:11 +05:30
PD-Team 39f495cd98
Merge pull request #1093 from DhiyaneshGeek/master 
ePMP 2000 Login , Pandora FMS Console , ContaCam , HP LaserJet
 2021-03-17 15:53:26 +05:30
Dhiyaneshwaran a8a09a3c44
Create hp-laserjet-detect.yaml 2021-03-16 22:20:51 +05:30
sandeep 9ac8e36094 Moving few templates under IOT 2021-03-16 22:17:55 +05:30
Dhiyaneshwaran 6b950424ee
Create contacam.yaml 2021-03-16 22:06:54 +05:30
Dhiyaneshwaran 6fbc7cf353
Create panasonic-network-management.yaml 2021-03-15 11:51:25 +05:30
savik ce41df0bfb
Update gitlab-snippets.yaml 
exclude empty snippets page
 2021-03-12 19:01:24 +03:00
sandeep f012eba951 adding tags to misconfiguration 2021-03-12 14:27:14 +05:30
sandeep 952eec228a moving files around 2021-03-12 13:40:33 +05:30
sandeep 51faee82ff Update gitlab-public-repos.yaml 2021-03-12 12:28:45 +05:30
Louis Dion-Marcil 2a50c876f8 Added gitlab-public-repos 2021-03-11 23:45:35 -05:00
Dwi Siswanto a88453a932 Fix comments-indentation linter 2021-03-11 23:16:43 +07:00
sandeep d3ee173ade Adding updated syntax 2021-03-11 19:47:22 +05:30
Prince Chaddha 152957b3a6 Update http-etcd-unauthenticated-api-data-leak.yaml 2021-03-09 14:34:36 +05:30
Dhiyaneshwaran 22d8c53714
Create http-etcd-unauthenticated-api-data-leak.yaml 2021-03-09 01:38:32 +05:30
Dhiyaneshwaran e4c22f147e
Create solr-query-dashboard.yaml 2021-03-07 19:16:57 +05:30
Dhiyaneshwaran f13243b743
Create unauthenticated-mongo-express.yaml 2021-03-07 19:16:30 +05:30
sandeep 2f328cecd2 Added gitlab-snippets 2021-03-07 18:50:45 +05:30
sandeep 74e63203b7 Update d-link-arbitary-fileread.yaml 2021-03-02 21:14:29 +05:30
Dhiyaneshwaran 85126a1a84
Create d-link-arbitary-fileread.yaml 2021-03-02 19:39:19 +05:30
PikPikcU 66f9dc25f7
Create zhiyuan-oa-unauthorized.yaml 2021-03-02 00:20:55 +00:00
PD-Team 214d6899f0
Rename phpmyadmin-wooYun.yaml to phpmyadmin-wooyun.yaml 2021-02-27 17:55:59 +05:30
sandeep bf798cda41 Update phpmyadmin-wooYun.yaml 2021-02-27 14:21:07 +05:30
Dhiyaneshwaran 0723b21963
Create phpmyadmin-wooYun.yaml 2021-02-26 23:56:21 +05:30
PD-Team c916f5f306
Merge pull request #955 from pikpikcu/patch-87 
Update unauthenticated-nacos-access.yaml
 2021-02-26 11:15:39 +05:30
sandeep 892c25e4d0 Update unauthenticated-nacos-access.yaml 2021-02-26 11:14:18 +05:30
PikPikcU b05c058a56
Update unauthenticated-nacos-access.yaml 2021-02-26 01:56:25 +00:00
PikPikcU 82fa1598cf
Update unauthenticated-airflow.yaml 2021-02-26 00:47:11 +00:00
sandeep d9c42a9c61 Removing duplicate template 2021-02-24 22:58:13 +05:30
sandeep e66eb0fdc3 misc changes 2021-02-24 22:55:41 +05:30
Dhiyaneshwaran 8cc50e8881
Update ups-status.yaml 2021-02-24 12:45:19 +05:30
Dhiyaneshwaran fbb02de2a1
Update ups-status.yaml 2021-02-24 12:40:54 +05:30
Dhiyaneshwaran 67f92df712
Update webalizer-statistics-exposed.yaml 2021-02-24 12:23:48 +05:30
Dhiyaneshwaran dbc65c59b4
Update webalizer-statistics-exposed.yaml 2021-02-24 12:22:03 +05:30
Dhiyaneshwaran 4a51398426
Update webalizer-statistics-exposed.yaml 2021-02-24 12:13:16 +05:30
Dhiyaneshwaran 1727b923be
Create webalizer-statistics-exposed.yaml 2021-02-24 12:07:08 +05:30
Dhiyaneshwaran 128d2cb205
Create ups-status.yaml 2021-02-24 12:06:29 +05:30
Dhiyaneshwaran cc963db47f
Create tcpconfig.yaml 2021-02-24 12:06:02 +05:30
Dhiyaneshwaran 68c7a957b4
Create java-melody-exposed.yaml 2021-02-24 12:05:37 +05:30
Dhiyaneshwaran fc163a4dad
Create haproxy-status.yaml 2021-02-24 12:05:05 +05:30
sandeep bff0e4c132 Update horde-unauthenticated.yaml 2021-02-23 14:03:44 +05:30
PikPikcU 3ae4fced09
Create horde-unauthenticated.yaml 2021-02-23 08:07:05 +00:00
sandeep 554de94ffe Fixing weak matcher 2021-02-14 23:21:42 +05:30
sandeep 45f694228c Update unauthenticated-prtg.yaml 2021-02-13 19:30:20 +05:30
sandeep dd7b29885f Update jboss-status.yaml 2021-02-13 16:38:00 +05:30
Dhiyaneshwaran 0b32b3ef8f
Create unauthenticated-prtg.yaml 2021-02-13 13:02:16 +05:30
Dhiyaneshwaran d180b4eb63
Create mikrotik-graph.yaml 2021-02-13 13:00:49 +05:30
Dhiyaneshwaran fb392d44d9
Create jboss-status.yaml 2021-02-13 12:59:31 +05:30
sandeep 44fbc886e0 misc changes 2021-02-10 20:37:28 +05:30
sandeep 01dde0e3f4 Update misconfigured-docker.yaml 2021-02-10 16:47:48 +05:30
PikPikcU 380b4e68f5
Fix front-page-misconfig (#826) 2021-02-08 19:34:29 +05:30
Binit Ghimire 064ff876e8
Update nginx-status.yaml (#818) 2021-02-07 19:05:49 +05:30
PD-Team 00d26c0608
Added tags to cves 😎 (#813) 
* Added tags to cves 😎
 2021-02-06 01:14:41 +05:30
Dhiyaneshwaran 32be639b5f
Update misconfigured-docker.yaml 2021-02-04 00:01:47 +05:30
Dhiyaneshwaran 2dd821bd18
Update misconfigured-docker.yaml 2021-02-03 23:59:33 +05:30
Dhiyaneshwaran 1d8ed33ebb
Update misconfigured-docker.yaml 2021-02-03 23:57:24 +05:30
Dhiyaneshwaran c5ab6a9a3f
Create misconfigured-docker.yaml 2021-02-03 23:48:23 +05:30
Dhiyaneshwaran d623fc14fa
Delete misconfigured-docker.yaml 2021-02-03 23:37:02 +05:30
Dhiyaneshwaran 061ce35b34
Update misconfigured-docker.yaml 2021-02-03 23:28:19 +05:30
Dhiyaneshwaran f46ae21079
Create misconfigured-docker.yaml 2021-02-03 23:23:05 +05:30
PD-Team aad1cc2924 Update salesforce-aura-misconfig.yaml 2021-01-31 15:51:25 +05:30
PD-Team 064f084dee misc changes 2021-01-29 23:53:50 +05:30
PD-Team 675c576b86
Merge pull request #757 from wdahlenburg/split_spring_boot_detect 
Split up springboot-detect
 2021-01-29 00:07:17 +05:30
PD-Team 40e1df8493 few fixes 2021-01-29 00:06:15 +05:30
PD-Team 663de70127 workflow updates 2021-01-28 23:47:22 +05:30
PD-Team 225aae6bb8 Delete springboot-detect.yaml 2021-01-28 23:30:34 +05:30
PD-Team 2fd6ae31cb Delete springboot-logfile.yaml 2021-01-28 23:27:15 +05:30
PD-Team 21bfead0b1 renaming few templates 2021-01-28 23:13:50 +05:30
PD-Team a9c9809283 Adding springboot-detect-logfile 2021-01-28 21:35:48 +05:30
PD-Team 0eee24b932 Adding springboot-detect-loggers 2021-01-28 21:26:38 +05:30
PD-Team c762044d29 updating incorrect file permissions 2021-01-21 23:28:32 +05:30
PD-Team a922262352 moving files around 2021-01-21 20:31:16 +05:30
Geeknik Labs 4e5b984ab5
Create php-fpm-status.yaml 
Examples can be found at https://www.shodan.io/search?query=PHP-FPM+Status
More information can be found at https://rtcamp.com/tutorials/php/fpm-status-page/
 2021-01-21 14:49:05 +00:00
Wyatt Dahlenburg bbf0d42cf9 Split springboot-detect into individual templates with appropriate severities and matchers 2021-01-14 10:09:23 -06:00
PD-Team dc24595935 BaseURL updates 2021-01-14 20:11:56 +05:30
team-projectdiscovery 106da77fc3 Preparing for request clustering 2021-01-13 13:01:46 +05:30
team-projectdiscovery 1468d8a52c matcher updates 2021-01-11 12:14:22 +05:30
team-projectdiscovery d69ce217e8 fixes 2021-01-11 04:50:14 +05:30
team-projectdiscovery b5dd30abf5 fixes 2021-01-11 04:09:54 +05:30
team-projectdiscovery f2f7ada0ff few more updates 2021-01-10 19:46:50 +05:30
team-projectdiscovery a52ffe5c4e fixes and updates 2021-01-10 19:45:36 +05:30
team-projectdiscovery a90d047991 Massive template checks addition 🎉 🎉 2021-01-10 18:41:25 +05:30
team-projectdiscovery 187e4a5feb moving more files around 2021-01-09 18:32:04 +05:30
team-projectdiscovery 95d784d9b7 moving folder/files around 2021-01-08 22:25:54 +05:30
team-projectdiscovery 21ea71e4c1 moving to new directory structure 2021-01-08 17:11:53 +05:30