nuclei-templates/http/misconfiguration/prometheus-promtail.yaml

34 lines
812 B
YAML

id: prometheus-promtail
info:
name: Prometheus Promtail - Exposure
author: irshad ahamed
severity: medium
description: |
Prometheus Promtail is an agent that gathers log data from various sources, such as files or systemd journal.
reference:
- https://grafana.com/docs/loki/latest/clients/promtail/
- https://github.com/grafana/loki/issues/8680
metadata:
verified: true
shodan-query: http.favicon.hash:932345713
max-request: 1
tags: prometheus,promtail,exposure,misconfig
http:
- method: GET
path:
- "{{BaseURL}}/service-discovery"
matchers-condition: and
matchers:
- type: word
words:
- '>Promtail</a>'
- 'https://github.com/grafana/loki'
condition: and
- type: status
status:
- 200