Commit Graph

11877 Commits (6e5afae8ce2736d2b1437dc9d8d40707f708aedd)

Author SHA1 Message Date
Muhammad Daffa dda18c7806
Create vmware-workflow.yaml (#3456)
* Create vmware-workflow.yaml

* update as per latest change

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-31 19:20:05 +05:30
sandeep e271ef18d3 minor updates 2021-12-31 19:15:20 +05:30
Dhiyaneshwaran 3e292cf21f
New Templates (#3452)
* Create secure-login-panel.yaml

* Create geo-webserver.yaml

* Create hp-virtual-connect-manager.yaml

* Create microsoft-azure-error.yaml

* Create microsoft-iis-8.yaml

* Create veeam-backup-azure-panel.yaml

* Create user-control-panel.yaml
2021-12-31 18:49:12 +05:30
Muhammad Daffa 256a2f6489
Create glpi-workflow.yaml (#3455) 2021-12-31 18:32:31 +05:30
Muhammad Daffa 3f1f8a5a9a
Create prometheus-workflow.yaml (#3454)
* Create prometheus-workflow.yaml

* workflow fix

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-31 18:28:27 +05:30
sandeep 3d5feb2f09 IdentityGuard template update 2021-12-31 18:17:10 +05:30
Muhammad Daffa c83d035fff
Seperate technology template (#3430)
* Edit magmi workflow

* Add some workflow template + edit some template

* Changing some templates

* minor update

* workflow matcher fixes

* tech update

* Seperate technology template

* Update metabase-panel.yaml

* Update lucee-detect.yaml

* Update oneblog-detect.yaml

* Update dolibarr-panel.yaml

* Update dolibarr-panel.yaml

* Update dolibarr-panel.yaml

* Update gespage-panel.yaml

* Update gespage-panel.yaml

* Update mautic-crm-panel.yaml

* Update kibana-panel.yaml

* Update metabase-panel.yaml

* Update home-assistant-detect.yaml

* Update jitsi-meet-detect.yaml

* Update lucee-detect.yaml

* Update gotmls-plugin-lfi.yaml

* Update and rename technologies/opencast-detect.yaml to exposed-panels/opencast-detect.yaml

* duplicate template - cves/2020/CVE-2020-11738.yaml

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
2021-12-31 17:57:46 +05:30
sandeep af6f66a37d Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates 2021-12-31 17:53:36 +05:30
sandeep 7eba1c5a0a added reference for rce 2021-12-31 17:53:27 +05:30
Sandeep Singh 6f03c10d08
Added Apache Apisix Default Login (#3453) 2021-12-31 17:31:08 +05:30
Prince Chaddha 6db74541b8
Merge pull request #3451 from pikpikcu/patch-312
Added apache-apisix-detect
2021-12-31 08:39:59 +05:30
Prince Chaddha 20db854f66
Update and rename exposed-panels/tomcat-pathnormalization.yaml to exposed-panels/apache/tomcat-pathnormalization.yaml 2021-12-31 08:38:35 +05:30
Prince Chaddha a8bdad3290
Update and rename exposed-panels/public-tomcat-manager.yaml to exposed-panels/apache/public-tomcat-manager.yaml 2021-12-31 08:31:26 +05:30
Prince Chaddha fa10327788
Update and rename technologies/apache/apache-apisix-detect.yaml to exposed-panels/apache/apache-apisix-panel.yaml 2021-12-31 08:30:31 +05:30
PikPikcU 1f9b972202
Create apache-apisix-detect.yaml 2021-12-31 08:10:15 +07:00
GitHub Action e238128b1c Auto Generated CVE annotations [Thu Dec 30 11:40:55 UTC 2021] 🤖 2021-12-30 11:40:55 +00:00
Sandeep Singh de7bef1300
Added CVE-2021-42567 (Apereo CAS Reflected XSS) (#3450)
* Added CVE-2021-42567 (Apereo CAS Reflected XSS)

* Added login panel detection
2021-12-30 17:09:29 +05:30
alph4byt3 3364d16799
Added R-SeeNet Detection and Default login template (#3441)
* Create CVE-2021-21804.yaml

* Added Advantech R-SeeNet Detection Template

* added shodan dork

* Update rseenet-detect.yaml

* Create rseenet-default-login.yaml

* Update CVE-2021-21804.yaml

* payload update

* Requires guest or any user to be logged in

> To trigger the described above vulnerability the attacker must be logged-in into the R-SeeNet website

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
2021-12-30 14:29:45 +05:30
ImNightmaree 9923e91348
Create glpi-directory-listing.yaml (#3439)
* Create glpi-directory-listing.yaml

* Linting

* Linting

Adds ``part: header``

* Update glpi-directory-listing.yaml

* Update glpi-directory-listing.yaml

* Update glpi-directory-listing.yaml

* Update glpi-directory-listing.yaml

* Update glpi-directory-listing.yaml

* Update glpi-directory-listing.yaml

* Update glpi-directory-listing.yaml

Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
2021-12-30 14:05:45 +05:30
Prince Chaddha 99741d1e5f
Merge pull request #3443 from DhiyaneshGeek/master
Vmware
2021-12-30 12:24:44 +05:30
Prince Chaddha 046629b709
Merge pull request #3448 from pussycat0x/master
New Templates Added
2021-12-30 12:16:51 +05:30
Prince Chaddha c069352d11
Update vmware-site-recovery-manager.yaml 2021-12-30 12:16:47 +05:30
Prince Chaddha a94c5d62a1
Update CVE-2021-40859.yaml 2021-12-30 12:15:22 +05:30
Prince Chaddha f3deec4325
Update CVE-2021-40859.yaml 2021-12-30 12:15:02 +05:30
Prince Chaddha a0bdd14786
Update securepoint-utm.yaml 2021-12-30 10:54:33 +05:30
Prince Chaddha c32237112e
Update and rename tableau-python-server.yaml to tableau-panel.yaml 2021-12-30 10:42:41 +05:30
Sandeep Singh 99c9a962bb
Update and rename tableau-python-server-defaultpage-detect.yaml to tableau-python-server.yaml 2021-12-29 22:13:21 +05:30
Sandeep Singh 279e0bef1e
Update and rename securepoint-utm-detect.yaml to securepoint-utm.yaml 2021-12-29 22:09:04 +05:30
Exid 80489bce76
Added wordpress-xmlrpc-brute-force.yaml (#3445)
* wp-xmlrpc-brute-force.yaml file was added

A Nuclei template for bruteforcing username and password through XMLRPC.

* wp-xmlrpc-brute-force.yaml file added

A Nuclei template for wordpress username and password Bruteforcing throught xmlrpc.php

* wp-xmlrpc-brute-force.yaml file added

A Nuclei template for wordpress username and password Bruteforcing throught xmlrpc.php

* Revert "wp-xmlrpc-brute-force.yaml file was added"

This reverts commit c0e4ca75a6ddbcf65e9443849a05c7b8f2625af9.

* few fixes

* Added wordpress user and pass list

* improved matcher

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-29 22:04:23 +05:30
Sandeep Singh a10aff06e5
Merge branch 'master' into master 2021-12-29 21:28:30 +05:30
pussycat0x bb89d0a7d9
Add files via upload 2021-12-29 21:20:19 +05:30
Gabriel Barros ce97393f95
Adding permission-policy header (#3447)
* Adding permission-policy header

* lint fix

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-29 20:06:58 +05:30
Pathtaga 5b8fc874fe
Added tomcat workflow (#3444) 2021-12-29 19:11:32 +05:30
Sandeep Singh de9c4d605c
Apache Tomcat Template improvements (#3446)
* Improved Tomcat matchers / extractors / paths

* removed duplicate detections / matchers

* removed duplicate template

* Added missing tomcat tags
2021-12-29 19:10:59 +05:30
Sandeep Singh d6da741663
IBM WebSphere Portal SSRF (#3442)
* Added IBM WebSphere Portal SSRF Detection

* Added IBM WebSphere Panel detection

* moving templates around
2021-12-29 17:32:10 +05:30
sandeep 8744282d5b removing matcher to avoid false negative result. 2021-12-29 12:10:51 +05:30
Prince Chaddha cb9fdbd7cc
Update and rename sofneta-mecdream-pacs-server-lfi.yaml to vulnerabilities/other/sofneta-mecdream-pacs-server-lfi.yaml 2021-12-29 11:28:09 +05:30
Prince Chaddha 8157e6428d
Merge pull request #3434 from Akokonunes/patch-98
Create sl-studio-lfi.yaml
2021-12-29 09:21:56 +05:30
Prince Chaddha 4ba5e931cc
Update sl-studio-lfi.yaml 2021-12-29 09:20:13 +05:30
Prince Chaddha b7974b288e
Update and rename sl-studio-lfi.yaml to vulnerabilities/other/sl-studio-lfi.yaml 2021-12-29 09:16:32 +05:30
ImNightmaree 34b07e01ab
Create adminset-panel.yaml (#3438)
* Create adminset-panel.yaml

* Update adminset-panel.yaml

Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
2021-12-28 22:04:01 +05:30
东方有鱼名为咸 7a05f1b538
add CVE-2021-45232.yaml (#3437)
* Create CVE-2021-45232.yaml

* matcher fixes

* more reference

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-28 19:43:00 +05:30
sandeep 85956018f8 Added metadata 2021-12-28 18:16:23 +05:30
Sandeep Singh 5d7d4409a0
Added CVE-2020-11546 (#3436)
Co-Authored-By: 0fficial_BlackHat13 <58517369+Official-BlackHat13@users.noreply.github.com>

Co-authored-by: 0fficial_BlackHat13 <58517369+Official-BlackHat13@users.noreply.github.com>
2021-12-28 18:13:04 +05:30
ImNightmaree 65334f9ecd
Create acrolinx-dashboard.yaml (#3431)
* Create acrolinx-dashboard

* Update and rename acrolinx-dashboard to acrolinx-dashboard.yaml

* Add further metadata

* Update acrolinx-dashboard.yaml

Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
2021-12-28 17:14:45 +05:30
Sandeep Singh 949fad8c30
Update sl-studio-lfi.yaml 2021-12-28 17:11:18 +05:30
Shivang Trivedi b6bf668da3
Changes in dnsmadeeasy (#3435)
Check this out https://github.com/indianajson/can-i-take-over-dns/issues/6
2021-12-28 17:09:50 +05:30
Dhiyaneshwaran 30b41d5607
Create vmware-site-recovery-manager.yaml 2021-12-28 14:26:30 +05:30
Dhiyaneshwaran a11b53fc1d
Merge pull request #2 from projectdiscovery/master
Updation
2021-12-28 14:11:51 +05:30
Roberto Nunes 3c5058b7ec
Create sl-studio-lfi.yaml 2021-12-28 17:23:04 +09:00