nuclei-templates/http/exposed-panels/umami-panel.yaml

38 lines
997 B
YAML

id: umami-panel
info:
name: Umami Panel - Detect
author: userdehghani
severity: info
description: |
simple, fast, privacy-focused, open-source analytics solution.
reference:
- https://umami.is/
- https://umami.is/docs
metadata:
verified: true
max-request: 1
shodan-query: http.favicon.hash:-130447705
tags: panel,umami,login,detect
http:
- method: GET
path:
- "{{BaseURL}}/login"
- "{{BaseURL}}/favicon.ico"
stop-at-first-match: true
matchers-condition: or
matchers:
- type: word
part: body
words:
- 'Login | umami'
- 'umami</div>'
condition: or
case-insensitive: true
- type: dsl
dsl:
- "status_code==200 && (\"-130447705\" == mmh3(base64_py(body)))"
# digest: 490a00463044022029194c0dffdde61fa306eed121e4193ed634878016007b77b6f7b55c3f9de11102204cddda016f7544b4b498c462c250522872b003cfeb36e329adecf572b1516411:922c64590222798bb761d5b6d8e72950