nuclei-templates/http/exposed-panels/fusionauth-admin-panel.yaml

44 lines
1.0 KiB
YAML

id: fusionauth-admin-panel
info:
name: FusionAuth Admin Panel - Detect
author: ritikchaddha
severity: info
metadata:
vendor: fusionauth
product: fusionauth
verified: true
max-request: 2
shodan-query: title:"FusionAuth"
tags: panel,fusionauth,detect,login
http:
- method: GET
path:
- "{{BaseURL}}"
- "{{BaseURL}}/oauth2/authorize"
stop-at-first-match: true
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- '<title>Login | FusionAuth'
- 'FusionAuth.OAuth2'
- 'content="FusionAuth'
condition: or
- type: status
status:
- 200
extractors:
- type: regex
part: body
group: 1
regex:
- 'FusionAuth\.Version = "([0-9.]+)";'
# digest: 490a0046304402202dfd273b70058e4629ae0e374bacb7519ed1c69dd18816b0f9d15a2bcd91f226022038687e84830aacfe7b48f193348c8b62c6c24346a983d4a5b81ff6e96a4dcd56:922c64590222798bb761d5b6d8e72950