nuclei-templates/http/misconfiguration/installer/connectwise-setup.yaml

34 lines
884 B
YAML

id: connectwise-setup
info:
name: ConnectWise Setup Wizard - Exposure
author: DhiyaneshDk
severity: high
classification:
cpe: cpe:2.3:a:connectwise:control:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: connectwise
product: control
shodan-query: html:"ContentPanel SetupWizard"
tags: misconfig,exposure,install,connectwise
http:
- method: GET
path:
- "{{BaseURL}}/SetupWizard.aspx"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "SetupWizardPage"
- "ContentPanel SetupWizard"
condition: and
- type: status
status:
- 200
# digest: 4a0a00473045022100e815d4d2ac7f02a9eaa2795c428ab696d1e35a668e4d6362c144f1601c262a060220794fddb9935da5ebd7b25c5395b1652f12b5cc146f0f8d493dd28d5a765dbd80:922c64590222798bb761d5b6d8e72950