nuclei-templates/misconfiguration/moleculer-microservices.yaml

35 lines
736 B
YAML

id: moleculer-microservices
info:
name: Moleculer Microservices Project
author: pussycat0x
severity: low
description: |
Moleculer microservice was able to be accessed with no required authentication in place.
metadata:
verified: "true"
shodan-query: title:"Moleculer Microservices Project"
tags: misconfig,microservice,moleculer,exposure
requests:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
words:
- "Moleculer Microservices Project"
- "Service/Action name"
condition: and
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200