id: drupal-install

info:
  name: Drupal Install
  author: NkxxkN
  severity: low
  description: Drupal Install panel exposed.
  metadata:
    max-request: 2
    shodan-query: http.component:"drupal"
  tags: exposure,drupal

http:
  - method: GET
    path:
      - "{{BaseURL}}/install.php?profile=default"
      - "{{BaseURL}}/core/install.php"

    stop-at-first-match: true
    host-redirects: true
    max-redirects: 1
    matchers:
      - type: word
        words:
          - "<title>Choose language | Drupal</title>"
# digest: 490a0046304402206f6f65e8aa3223ec1f67b0e97780b4bc7d9ddc28af4ba9562d4d52ae06946a82022037c67f1e4b8c5b8bac6369fb8a23830b76a97f8188317b70b7275c284b201b8c:922c64590222798bb761d5b6d8e72950