nuclei-templates/misconfiguration/drupal/drupal-user-enum-redirect.yaml

37 lines
715 B
YAML

id: drupal-user-enum-redirect
info:
name: Drupal User Enumeration [Redirect]
author: 0w4ys
severity: info
metadata:
verified: true
shodan-query: http.component:"Drupal"
tags: drupal,misconfig
requests:
- method: GET
path:
- "{{BaseURL}}/user/0"
- "{{BaseURL}}/user/1"
- "{{BaseURL}}/user/2"
- "{{BaseURL}}/user/3"
stop-at-first-match: true
matchers-condition: and
matchers:
- type: regex
regex:
- '(?i)Location: https?:\/\/[\w\.\-]+[:\/\w-]*\/users\/\w+'
part: header
- type: status
status:
- 301
extractors:
- type: regex
part: header
regex:
- 'users\/\w+'