nuclei-templates/http/misconfiguration/hp/unauthorized-printer-hp.yaml

27 lines
589 B
YAML

id: unauthorized-printer-hp
info:
name: Unauthorized HP office pro printer
author: pussycat0x,r3naissance
severity: high
metadata:
max-request: 2
shodan-query: http.title:"Hp Officejet pro"
tags: hp,iot,unauth,misconfig
http:
- method: GET
path:
- "{{BaseURL}}"
- "{{BaseURL}}/hp/device/webAccess/index.htm?content=security"
matchers-condition: and
matchers:
- type: regex
regex:
- '<title>(HP Officejet Pro([ 0-9A-Za-z]+)|HP Designjet([ 0-9A-Za-z]+).*)<\/title>'
- type: status
status:
- 200