nuclei-templates/http/misconfiguration/locust-exposure.yaml

36 lines
821 B
YAML

id: locust-exposure
info:
name: Locust Exposure
author: DhiyaneshDK,bhutch
severity: medium
description: Locust is exposed.
metadata:
verified: true
max-request: 1
shodan-query: title:"Locust"
tags: exposure,locust,misconfig
http:
- method: GET
path:
- '{{BaseURL}}'
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- '<title>Locust(?: for.+)?</title>'
- type: word
part: body
words:
- 'locust.js'
- 'Charts</a>'
condition: or
- type: status
status:
- 200
# digest: 4a0a004730450220755c610c3605c8aa0565acacb3939c31921c647442ac69cdf782155522339674022100fa6b4781f15d398972b7a7a1e42ca0bc3c04f538b2c5b4c3a8d0f7777ed0ce5b:922c64590222798bb761d5b6d8e72950