nuclei-templates/iot/liveview-axis-camera.yaml

42 lines
931 B
YAML

id: liveview-axis-camera
info:
name: Live View AXIS Network Camera
author: dhiyaneshDK,f1she3
severity: info
reference:
- https://www.exploit-db.com/ghdb/6843
tags: axis,network,edb,iot
requests:
- method: GET
path:
- '{{BaseURL}}/view/viewer_index.shtml'
- '{{BaseURL}}/pics/logo_70x29px.gif'
redirects: true
max-redirects: 2
stop-at-first-match: true
matchers-condition: or
matchers:
- type: dsl
name: stream-view
dsl:
- 'contains(tolower(body), "live view - axis")'
- 'contains(tolower(body), "live view - axis")'
condition: or
- type: dsl
name: logo
dsl:
- 'status_code == 200'
- '"1106649083" == mmh3(base64_py(body))'
condition: and
extractors:
- type: regex
part: body
group: 1
regex:
- 'AXIS (.*) Network Camera</title>'