id: exposed-kafdrop

info:
  name: Publicly exposed Kafdrop Interface
  author: dhiyaneshDk
  severity: low
  tags: exposure,misconfig,kafdrop
  metadata:
    max-request: 1

http:
  - method: GET
    path:
      - '{{BaseURL}}'

    matchers:
      - type: word
        words:
          - "<title>Kafdrop: Broker List</title>"
          - "Kafka Cluster Overview"
        condition: and