nuclei-templates/http/misconfiguration/gocd/gocd-encryption-key.yaml

45 lines
1.2 KiB
YAML

id: gocd-encryption-key
info:
name: GoCd Encryption Key
author: dhiyaneshDk
severity: low
description: GoCd Encryption Key is exposed.
reference:
- https://attackerkb.com/assessments/9101a539-4c6e-4638-a2ec-12080b7e3b50
- https://blog.sonarsource.com/gocd-pre-auth-pipeline-takeover
- https://twitter.com/wvuuuuuuuuuuuuu/status/1456316586831323140
classification:
cpe: cpe:2.3:a:thoughtworks:gocd:*:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: thoughtworks
product: gocd
shodan-query: http.title:"Create a pipeline - Go" html:"GoCD Version"
tags: go,gocd,exposure,misconfig
http:
- method: GET
path:
- "{{BaseURL}}/go/add-on/business-continuity/api/cipher.aes"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: regex
regex:
- "([a-z0-9]){32}"
- type: word
part: header
words:
- "text/plain"
extractors:
- type: regex
regex:
- "([a-z0-9]){32}"
# digest: 4a0a00473045022100cb660f1fd76b1e1142b3fb8a0d071123a2a41bba4c674ef070c22ce4fc99a6d502205227541ddc1d4fa6a00d2f476a44d6f8cf0c593b5fffe121e8db50ee00af7788:922c64590222798bb761d5b6d8e72950