nuclei-templates/http/exposed-panels/geoserver-login-panel.yaml

47 lines
1.1 KiB
YAML

id: geoserver-login-panel
info:
name: GeoServer Login Panel - Detect
author: ritikchaddha
severity: info
description: GeoServer login panel was detected.
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0
cwe-id: CWE-200
metadata:
verified: true
max-request: 2
vendor: osgeo
product: geoserver
shodan-query: title:"GeoServer"
tags: panel,geoserver
http:
- method: GET
path:
- "{{BaseURL}}/web"
- "{{BaseURL}}/geoserver/web/"
host-redirects: true
max-redirects: 2
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
part: body
words:
- "<title>GeoServer: Welcome</title>"
- type: status
status:
- 200
extractors:
- type: regex
part: body
group: 1
regex:
- '<span>GeoServer ([0-9.]+)'
# digest: 4a0a00473045022063f0a4c0e04f419c28165d6c666d2ce1c9c0dacf11fba1f0028f0c1df48bd53a022100b57fa4d8dfcc21281f79c4e5fc3313b23b4e30c8a523c60bb996ba2103f1d5f0:922c64590222798bb761d5b6d8e72950