nuclei-templates/http/misconfiguration/installer/combodo-itop-installer.yaml

34 lines
729 B
YAML

id: combodo-itop-installer
info:
name: Combodo iTop Installer/Upgrade - Exposure
author: DhiyaneshDK
severity: high
reference:
- https://www.itophub.io/wiki/page?id=2_4_0:install:install_wizard
metadata:
max-request: 2
shodan-query: html:"Installation" html:"itop"
verified: true
tags: misconfig,itop,install,exposure
http:
- method: GET
path:
- '{{BaseURL}}/setup/wizard.php'
- '{{BaseURL}}/itop/setup/wizard.php'
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
part: body
words:
- "iTop Installation Wizard"
- "/setup.js"
condition: and
- type: status
status:
- 200