nuclei-templates/http/misconfiguration/hpe-system-management-anony...

21 lines
443 B
YAML

id: hpe-system-management-anonymous-access
info:
name: HPE System Management Anonymous Access
author: divya_mudgal
severity: low
tags: hp,unauth
http:
- method: GET
path:
- "{{BaseURL}}/chpstrt.php?chppath=Home"
matchers-condition: and
matchers:
- type: word
condition: and
words:
- "username = \"hpsmh_anonymous\";"
- "var host_addr = '"
- "var ip_addr = '"