id: hp-device-info-detect

info:
  name: HP Device Info Detection
  author: pussycat0x
  severity: low
  description: Internal info is disclosed to external users in HP Device.
  reference: https://www.exploit-db.com/ghdb/6905
  metadata:
    max-request: 1
  tags: iot,hp

http:
  - method: GET
    path:
      - "{{BaseURL}}/hp/device/DeviceInformation/View"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "Device Information"
          - "hp"
        condition: and

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100d808f80b30548eb68ef9e06b924775f9481d8704d89a9d1f172814fc83814aa0022100836b21d4e04925a6a9649cb9183dc4d401d2ff78c1e0df8e2a4ab15dad310849:922c64590222798bb761d5b6d8e72950