nuclei-templates/exposures/configs/hikvision-info-leak.yaml

25 lines
424 B
YAML

id: hikvision-info-leak
info:
name: Hikvision Info Leak
author: pikpikcu
severity: medium
tags: exposure,config
requests:
- method: GET
path:
- '{{BaseURL}}/config/user.xml'
matchers-condition: and
matchers:
- type: word
words:
- '<user name='
- 'password='
condition: and
- type: word
words:
- "text/xml"
part: header