nuclei-templates/http/misconfiguration/installer/invoice-ninja-installer.yaml

32 lines
802 B
YAML

id: invoice-ninja-installer
info:
name: Invoice Ninja Setup Page - Exposure
author: DhiyaneshDK
severity: high
description: |
Detects exposed Invoice Ninja Setup page.
reference:
- https://invoiceninja.com/
metadata:
verified: true
max-request: 1
shodan-query: html:"Invoice Ninja Setup"
tags: misconfig,install,exposure,invoice
http:
- method: GET
path:
- "{{BaseURL}}/setup"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "Invoice Ninja Setup"
- type: status
status:
- 200
# digest: 4a0a0047304502206e0d927418f5a6789e48f8b427edda11664ba45a9e6ac0dc19855c1f2afb388a022100a692a70a5192fe68f64f8ee34e21c62d742439864429f382a5ea47c4094cefc2:922c64590222798bb761d5b6d8e72950