nuclei-templates/http/misconfiguration/airflow/airflow-debug.yaml

31 lines
779 B
YAML

id: airflow-debug
info:
name: Airflow Debug Trace
author: pdteam
severity: low
description: Airflow Debug Trace enabled.
metadata:
verified: true
max-request: 1
shodan-query: title:"Airflow - DAGs"
tags: apache,airflow,fpd,misconfig
http:
- method: GET
path:
- "{{BaseURL}}/admin/airflow/login"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "<h1> Ooops. </h1>"
- "Traceback (most recent call last)"
condition: and
- type: status
status:
- 500
# digest: 4a0a00473045022100b07309b0cbd96d505399c9c82239f762478a3023c1e8556e3e6d773d6afd1416022012c8681190e9080dab6e8fb7278dd01ea443ade8c3845cd3550bda5352584ae9:922c64590222798bb761d5b6d8e72950