nuclei-templates/http/exposed-panels/phppgadmin-panel.yaml

42 lines
1.2 KiB
YAML

id: phppgadmin-panel
info:
name: phpPgAdmin Login Panel - Detect
author: Ganofins,Nullfuzz
severity: info
description: |
phpPgAdmin login ipanel was detected.
reference:
- https://docs.cpanel.net/cpanel/databases/phppgadmin/
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
cpe: cpe:2.3:a:phppgadmin_project:phppgadmin:*:*:*:*:*:*:*:*
metadata:
max-request: 2
product: phppgadmin
shodan-query: http.title:phpPgAdmin
vendor: phppgadmin_project
verified: true
tags: panel,phppgadmin,phppgadmin_project
http:
- method: GET
path:
- "{{BaseURL}}"
- "{{BaseURL}}/phppgadmin/"
matchers-condition: or
matchers:
- type: dsl
dsl:
- "status_code == 200"
- "contains(body, 'intro.php') && contains(body, 'browser.php')"
condition: and
- type: dsl
dsl:
- "status_code == 200"
- "contains(body, '<title>phpPgAdmin')"
condition: and
# digest: 4a0a00473045022100fb2d49559903cb5abeaeb5a35ec204d34b101ad4f89414d2f50801517cc33db20220505df87dcb561a7c1391332bb7028f9c310ec889a2b78a6290c7b4eb23fae3f0:922c64590222798bb761d5b6d8e72950