nuclei-templates/http/misconfiguration/installer/phpwind-installer.yaml

38 lines
914 B
YAML

id: phpwind-installer
info:
name: phpwind Installer Exposure
description: phpwind is susceptible to the Installation page exposure due to misconfiguration.
author: tess
severity: high
metadata:
verified: true
max-request: 1
shodan-query: title:"Powered by phpwind"
tags: misconfig,phpwind,exposure,install
http:
- method: GET
path:
- '{{BaseURL}}/install.php?a=check'
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'Powered by phpwind</title>'
- '安装'
condition: and
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200
# digest: 490a0046304402206b8b2179c0045994a97ddcabcf66a6afd5f93111b769b6f5ca62e0f914f9641502202db6309422f37bd73df186899e3a7ad93d497f5a673d3b75a0d1186df6d38c51:922c64590222798bb761d5b6d8e72950