nuclei-templates/http/exposed-panels/nexus-panel.yaml

35 lines
995 B
YAML

id: nexus-panel
info:
name: Nexus Login Panel - Detect
author: righettod
severity: info
description: |
Nexus login panel was detected.
reference:
- https://www.sonatype.com/products/sonatype-nexus-repository
metadata:
verified: true
max-request: 1
shodan-query: http.title:"Sonatype Nexus Repository"
tags: panel,nexus,login,detect
http:
- method: GET
path:
- "{{BaseURL}}"
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains_any(to_lower(body), "<title>sonatype nexus repository", "content=\"sonatype nexus repository", "nexus-coreui-bundle")'
condition: and
extractors:
- type: regex
part: body
group: 1
regex:
- '_v=([0-9\.\-]+)'
# digest: 4a0a00473045022004bd786498a0b39312ba106ec6f1a9c560d3b92ceebf62da375860e0ad8b3f10022100aa0908b2887076643d11d64a142491b735a3e5001e1be0b1b42e473c52077ceb:922c64590222798bb761d5b6d8e72950