nuclei-templates/http/misconfiguration/libvirt-exporter-metrics.yaml

35 lines
865 B
YAML

id: libvirt-exporter-metrics
info:
name: Libvirt Exporter Metrics
author: DhiyaneshDk
severity: low
description: Libvirt Exporter is leaking metrics.
classification:
cpe: cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: redhat
product: libvirt
shodan-query: title:"Libvirt"
tags: libvirt,exposure,debug,misconfig
http:
- method: GET
path:
- "{{BaseURL}}/metrics"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "# HELP"
- "libvirt_"
condition: and
- type: status
status:
- 200
# digest: 4a0a00473045022034692276c5d2c8f7f574447310bd334814eb80e58a89f8327348ac02828fa7ee022100aa352ca522db779819ee6170349ebde0c5397e7602d92e080cf403ca507d2c0e:922c64590222798bb761d5b6d8e72950