nuclei-templates/http/misconfiguration/apache/apache-hbase-unauth.yaml

27 lines
687 B
YAML

id: apache-hbase-unauth
info:
name: Apache Hbase Unauth
author: pikpikcu
severity: medium
description: Apache Hbase is exposed.
metadata:
max-request: 1
tags: apache,unauth,misconfig
http:
- method: GET
path:
- '{{BaseURL}}/conf'
matchers-condition: and
matchers:
- type: word
words:
- '<name>hbase.defaults.for.version</name>'
- '<source>hbase-default.xml</source>'
- type: status
status:
- 200
# digest: 4a0a0047304502210096cfb5a6f0be5ec5bb58952caf4d6288ad52982132b5ea9b98db90c4e39c254d02202c8364e917ad25f12fd9d9c488dc71636f1264e3c4261b89d824f0dad007f0e8:922c64590222798bb761d5b6d8e72950