nuclei-templates/http/misconfiguration/hp/unauthorized-printer-hp.yaml

29 lines
782 B
YAML

id: unauthorized-printer-hp
info:
name: Unauthorized HP office pro printer
author: pussycat0x,r3naissance
severity: high
metadata:
max-request: 2
shodan-query: http.title:"Hp Officejet pro"
tags: hp,iot,unauth,misconfig
http:
- method: GET
path:
- "{{BaseURL}}"
- "{{BaseURL}}/hp/device/webAccess/index.htm?content=security"
matchers-condition: and
matchers:
- type: regex
regex:
- '<title>(HP Officejet Pro([ 0-9A-Za-z]+)|HP Designjet([ 0-9A-Za-z]+).*)<\/title>'
- type: status
status:
- 200
# digest: 490a004630440220070f6cf89d32badf15aeac8c68d7c240d43da9c82c53310461addc55ff0ca08c0220298e42b40cefc9202578c5d4847d72e2678136e51248e889c7ceb8dfa799bc4c:922c64590222798bb761d5b6d8e72950