nuclei-templates/http/misconfiguration/installer/unifi-wizard-install.yaml

39 lines
866 B
YAML

id: unifi-wizard-install
info:
name: UniFi Wizard Installer
author: DhiyaneshDk
severity: high
metadata:
verified: true
max-request: 1
shodan-query: title:"UniFi Wizard"
tags: misconfig,install,unifi,exposure
http:
- method: GET
path:
- "{{BaseURL}}/manage/wizard/"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "UniFi Wizard"
- "app-unifi-wizard"
condition: and
- type: status
status:
- 200
extractors:
- type: regex
part: body
group: 1
regex:
- "window.unifiConfig.version = '(.*)'"
# digest: 4a0a004730450220785d42fd41886bb6bc79d4be9f5c6ef25513b22181962d404c3c87abc118a82f022100dd1d7eafc9198b2f45cadd85867e29495985760fb8af079a3c694ce0f00bf573:922c64590222798bb761d5b6d8e72950