nuclei-templates/http/misconfiguration/moleculer-microservices.yaml

36 lines
749 B
YAML

id: moleculer-microservices
info:
name: Moleculer Microservices Project
author: pussycat0x
severity: low
description: |
Moleculer microservice was able to be accessed with no required authentication in place.
metadata:
max-request: 1
verified: true
shodan-query: title:"Moleculer Microservices Project"
tags: misconfig,microservice,moleculer,exposure
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
words:
- "Moleculer Microservices Project"
- "Service/Action name"
condition: and
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200