nuclei-templates/http/misconfiguration/apache/kafka-manager-unauth.yaml

30 lines
791 B
YAML

id: kafka-manager-unauth
info:
name: Kafka Manager Panel - Unauthorized Access
author: Paper-Pen
severity: low
description: A kafka manager unauthorized access was discovered.
reference:
- https://github.com/yahoo/CMAK
metadata:
max-request: 1
fofa-query: app="Kafka-Manager"
tags: misconfig,apache,kafka,unauth,exposure
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "<title>Kafka Manager</title>"
- type: status
status:
- 200
# digest: 4b0a00483046022100cc40c4a8296a031004defae1f2dd00921e3c85dc61b9812ea8c639c48911d5c8022100810aa1431d4a113090baf6cca4a51a432009eae1305f285f02237526accdf7f7:922c64590222798bb761d5b6d8e72950