nuclei-templates/http/misconfiguration/installer/unifi-wizard-install.yaml

37 lines
671 B
YAML

id: unifi-wizard-install
info:
name: UniFi Wizard Installer
author: DhiyaneshDk
severity: high
metadata:
max-request: 1
verified: true
shodan-query: title:"UniFi Wizard"
tags: misconfig,install,unifi,exposure
http:
- method: GET
path:
- "{{BaseURL}}/manage/wizard/"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "UniFi Wizard"
- "app-unifi-wizard"
condition: and
- type: status
status:
- 200
extractors:
- type: regex
part: body
group: 1
regex:
- "window.unifiConfig.version = '(.*)'"