nuclei-templates/http/misconfiguration/unauth-zwave-mqtt.yaml

33 lines
763 B
YAML

id: unauth-zwave-mqtt
info:
name: Unauthenticated ZWave To MQTT Console
author: geeknik
severity: low
reference:
- https://github.com/OpenZWave/Zwave2Mqtt
metadata:
verified: true
max-request: 1
shodan-query: title:"ZWave To MQTT"
tags: misconfig,zwave,mqtt,unauth
http:
- method: GET
path:
- '{{BaseURL}}'
matchers-condition: and
matchers:
- type: word
words:
- 'ZWave To MQTT'
- 'content="Zwavejs2Mqtt"'
condition: and
- type: status
status:
- 200
# digest: 4a0a004730450220093e359c4e166f9cb69ff68ab5fecd5a9550d7a1a12a231d57f0888541821109022100c12ea3f27bec3c08bc0310f2ee523f28615aa64878c9be793ef840aecc2ce178:922c64590222798bb761d5b6d8e72950