nuclei-templates/http/misconfiguration/installer/atlassian-bamboo-setup-wiza...

39 lines
1.1 KiB
YAML

id: atlassian-bamboo-setup
info:
name: Atlassian Bamboo Setup Wizard
author: pussycat0x
severity: info
description: Atlassian Bamboo is susceptible to the Installation page exposure due to misconfiguration.
classification:
cpe: cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: atlassian
product: bamboo
shodan-query: title:"Bamboo setup wizard"
tags: misconfig,atlassian,bamboo,setup,installer
http:
- method: GET
path:
- "{{BaseURL}}/setup/setupLicense.action"
matchers-condition: and
matchers:
- type: word
words:
- "Bamboo setup wizard - Atlassian Bamboo"
- "Bamboo evaluation license"
condition: and
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200
# digest: 4b0a00483046022100c63e8179cebce9fd38988fd8a721d2ab3665441d277545540e3f59df921a3d01022100d16971bf5fbcf0832338f2067dfda2d204c0504cbebe365e5e6c9323b9c60b67:922c64590222798bb761d5b6d8e72950