nuclei-templates/misconfiguration
Dhiyaneshwaran 0e8b34f776
New Templates & Workflow (#3556)
* Create secure-login-panel.yaml

* Create geo-webserver.yaml

* Create hp-virtual-connect-manager.yaml

* Create microsoft-azure-error.yaml

* Create microsoft-iis-8.yaml

* Create veeam-backup-azure-panel.yaml

* Create user-control-panel.yaml

* Create kafka-consumer-monitor.yaml

* Update kafka-consumer-monitor.yaml

* Create kafka-connect-ui-exposure.yaml

* misc updates

* duplicate template

existing one - `exposed-panels/kafka-connect-ui.yaml`

* Create kafka-cruise-control.yaml

* Create kafka-center-default-login.yaml

* Create kafka-center-login.yaml

* minor update

* Create azure-kubernetes-service.yaml

* Update azure-kubernetes-service.yaml

* Update azure-kubernetes-service.yaml

* Create barracuda-panel.yaml

* Update barracuda-panel.yaml

* Update barracuda-panel.yaml

* Create CVE-2021-24891.yaml

* template meta info update

* Delete CVE-2021-24891.yaml

* Create caddy-open-redirect.yaml

* Create concrete5-panel.yaml

* Create concrete-workflow.yaml

* updated matcher to avoid false negative results

* misc updates

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-01-19 13:21:15 +05:30
..
adobe Delete adobe-connect-xss.yaml 2021-06-15 15:54:19 +05:30
aem Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
airflow Added airflow-debug 2021-06-03 19:39:51 +05:30
apache Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
drupal Added stop-at-first-match in applicable templates 2021-09-02 17:29:10 +05:30
gitlab Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
gocd Update gocd-encryption-key.yaml 2021-11-06 18:45:55 +05:30
hp Update unauthorized-hp-officepro-printer.yaml 2021-11-11 11:14:52 +05:30
kubernetes Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
nginx Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
phpmyadmin misc updates 2021-11-11 22:04:45 +05:30
prometheus Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
proxy Add cloud metadata checks for reverse proxies (#3528) 2022-01-16 17:55:28 +05:30
sap Satisfying the linter (all errors and warnings) 2021-08-19 17:44:46 +03:00
springboot Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
vulnerabilities/other Update umbraco-base-ssrf.yaml 2021-10-30 22:06:04 +05:30
akamai-arl-xss.yaml Satisfying the linter (all errors and warnings) 2021-08-19 17:44:46 +03:00
alibaba-mongoshake-unauth.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
ampps-dirlisting.yaml Update ampps-dirlisting.yaml 2021-11-17 22:24:40 +05:00
android-debug-database-exposed.yaml Update android-debug-database-exposed.yaml 2021-07-29 10:47:01 +05:30
apc-info.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
application-yaml.yaml Added missing tag 2021-10-28 17:44:58 +05:30
artifactory-anonymous-deploy.yaml Updated matcher 2021-06-08 00:33:06 +05:30
aspx-debug-mode.yaml removed extra headers not required for template 2021-09-08 17:47:19 +05:30
aws-object-listing.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
aws-redirect.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
browserless-debugger.yaml Add Browserless Debugger Template (#3537) 2022-01-14 11:55:08 +05:30
caddy-open-redirect.yaml New Templates & Workflow (#3556) 2022-01-19 13:21:15 +05:30
cgi-test-page.yaml adding tags to misconfiguration 2021-03-12 14:27:14 +05:30
clockwork-dashboard-exposure.yaml more matchers update 2021-07-24 03:13:09 +05:30
cloudflare-image-ssrf.yaml oob tags update 2021-10-19 02:10:26 +05:30
cx-cloud-upload-detect.yaml Create cx-cloud-upload-detect.yaml 2021-05-23 17:07:30 +05:30
d-link-arbitary-fileread.yaml matcher update to handle edge cases 2021-07-25 03:05:55 +05:30
database-error.yaml Update and rename exposures/logs/database-error.yaml to misconfiguration/database-error.yaml 2021-09-17 13:33:54 +05:30
dgraph-dashboard-exposure.yaml Update dgraph-dashboard-exposure.yaml 2021-12-22 13:01:22 +05:30
django-debug-detect.yaml Updated author names 2021-06-09 17:50:56 +05:30
docker-registry.yaml Update docker-registry.yaml 2021-05-27 02:44:33 +05:30
druid-monitor.yaml Updated author names 2021-06-09 17:50:56 +05:30
elasticsearch.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
etcd-unauthenticated-api.yaml clean-up 2021-09-21 17:16:53 +05:30
exposed-docker-api.yaml Updated author names 2021-06-09 17:50:56 +05:30
exposed-jquery-file-upload.yaml Update exposed-jquery-file-upload.yaml 2021-06-06 17:55:05 +05:30
exposed-kafdrop.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
exposed-kibana.yaml adding tags to misconfiguration 2021-03-12 14:27:14 +05:30
exposed-service-now.yaml Updates across many templates for clarity, spelling, and grammar. 2021-09-05 17:13:45 -04:00
exposed-sqlite-manager.yaml misc changes 2021-03-21 20:24:45 +05:30
formalms-install.yaml Create formalms-install.yaml 2021-12-13 14:22:46 +05:30
front-page-misconfig.yaml Coverage for all templates using tags 2021-09-09 19:08:13 +05:30
git-web-interface.yaml minor updates to template 2021-11-21 14:53:15 +05:30
gitlist-disclosure.yaml minor updates to template 2021-11-21 14:53:15 +05:30
glpi-directory-listing.yaml Create glpi-directory-listing.yaml (#3439) 2021-12-30 14:05:45 +05:30
grafana-public-signup.yaml Added intrusive tag 2021-08-19 22:59:45 +05:30
hadoop-unauth.yaml Update hadoop-unauth.yaml 2021-07-26 01:33:02 +05:30
haproxy-status.yaml adding tags to misconfiguration 2021-03-12 14:27:14 +05:30
horde-unauthenticated.yaml adding tags to misconfiguration 2021-03-12 14:27:14 +05:30
hpe-system-management-anonymous.yaml misc update 2021-10-14 00:14:29 +05:30
http-missing-security-headers.yaml Adding permission-policy header (#3447) 2021-12-29 20:06:58 +05:30
ibm-friendly-path-exposure.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
iis-internal-ip-disclosure.yaml removed extra headers not required for template 2021-09-08 17:47:19 +05:30
jaeger-ui-dashboard.yaml metadata update 2021-10-22 23:22:36 +05:30
java-melody-exposed.yaml Fixed yaml linting errors 2021-08-25 14:09:42 +02:00
jboss-status.yaml adding tags to misconfiguration 2021-03-12 14:27:14 +05:30
jetty-showcontexts-enable.yaml minor updates 2021-07-04 01:22:08 +05:30
jkstatus-manager.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
jolokia-unauthenticated-lfi.yaml update: added additional path 2021-12-05 16:48:49 +05:30
jupyter-ipython-unauth.yaml adding tags to misconfiguration 2021-03-12 14:27:14 +05:30
kafka-cruise-control.yaml Kafka Center Default Login , Panel , Kafka Cruise Control UI Dashboard (#3472) 2022-01-03 23:52:26 +05:30
kubeflow-dashboard-unauth.yaml misc changes 2021-05-24 01:26:48 +05:30
laravel-debug-enabled.yaml Updates across many templates for clarity, spelling, and grammar. 2021-09-05 17:13:45 -04:00
laravel-debug-error.yaml tags and name update 2021-04-18 21:11:40 +05:30
linkerd-ssrf-detect.yaml oob tags update 2021-10-19 02:10:26 +05:30
manage-engine-ad-search.yaml adding tags to misconfiguration 2021-03-12 14:27:14 +05:30
mikrotik-graph.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
misconfigured-docker.yaml Update misconfigured-docker.yaml 2021-05-27 02:42:11 +05:30
nextcloud-install.yaml Nextcloud templates 2021-09-05 22:52:45 +05:30
node-exporter-metrics.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
office365-open-redirect.yaml minor update 2021-08-05 16:31:01 +05:30
php-errors.yaml Merge PHP Errors Templates 2021-10-21 10:46:04 +02:00
php-fpm-status.yaml adding tags to misconfiguration 2021-03-12 14:27:14 +05:30
pinpoint-unauth.yaml misc changes 2021-05-24 01:26:48 +05:30
private-key-exposure.yaml Added Private key exposure via helper detector 2021-06-04 20:46:19 +05:30
put-method-enabled.yaml * Added Host headers where needed (validated via disclosures/posts) 2021-09-30 12:52:05 -04:00
python-metrics.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
rack-mini-profiler.yaml Typo and language corrections 2021-09-20 15:25:11 -04:00
salesforce-aura.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
server-status-localhost.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
service-pwd.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
shell-history.yaml Update shell-history.yaml 2021-09-17 10:00:22 -05:00
sitecore-debug-page.yaml Create sitecore-debug-page.yaml 2021-11-03 23:16:23 +05:30
skycaiji-install.yaml Update skycaiji-install.yaml 2021-10-08 12:06:44 +05:30
solr-query-dashboard.yaml Update solr-query-dashboard.yaml (#3475) 2022-01-04 16:02:45 +05:30
sonarqube-public-projects.yaml Improved matcher 2021-04-28 15:13:16 +05:30
spidercontrol-scada-server-info.yaml Create spidercontrol-scada-server-info.yaml 2021-04-24 17:22:22 +00:00
ssrf-via-oauth-misconfig.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
symfony-debugmode.yaml Additional matcher for Symfony debug mode 2021-07-26 17:21:46 +05:30
tcpconfig.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
tomcat-scripts.yaml Apache Tomcat Template improvements (#3446) 2021-12-29 19:10:59 +05:30
unauthenticated-alert-manager.yaml minor updates 2021-07-13 19:35:58 +05:30
unauthenticated-glances.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
unauthenticated-glowroot.yaml Create unauthenticated-glowroot.yaml 2021-09-15 13:28:43 +05:30
unauthenticated-influxdb.yaml lint fix 2021-11-13 14:16:19 +05:30
unauthenticated-lansweeper.yaml misc updates 2021-10-11 01:38:44 +05:30
unauthenticated-mongo-express.yaml Update unauthenticated-mongo-express.yaml 2021-08-31 13:32:56 +05:30
unauthenticated-nacos-access.yaml Changes fixes/around dynamic attributes ("additional-fields") 2021-08-19 16:17:27 +03:00
unauthenticated-netdata.yaml file updates 2021-05-11 21:14:40 +05:30
unauthenticated-popup-upload.yaml Update unauthenticated-popup-upload.yaml 2021-07-15 13:52:06 +05:30
unauthenticated-prtg.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
unauthenticated-tensorboard.yaml misc changes 2021-05-16 21:04:58 +05:30
unauthenticated-varnish-cache-purge.yaml Change ID to match filename (#3267) 2021-12-05 12:02:46 +05:30
unauthenticated-zippkin.yaml file updates 2021-05-11 21:14:40 +05:30
unauthorized-hp-printer.yaml Rename hp-printer-unanuthorized-access.yaml to unauthorized-hp-printer.yaml 2021-07-13 01:45:40 +05:30
unauthorized-plastic-scm.yaml Update unauthorized-plastic-scm.yaml 2021-07-03 16:39:59 +05:30
unauthorized-puppet-node-manager-detect.yaml unauthorized Puppet Node Manager (#3388) 2021-12-22 12:16:05 +05:30
ups-status.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
viewpoint-system-status.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
wamp-server-configuration.yaml Update wamp-server-configuration.yaml 2021-07-22 17:54:19 +05:30
wamp-xdebug-detect.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
wildcard-postmessage.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30
zabbix-dashboards-access.yaml Satisfying the linter (all errors and warnings) 2021-08-19 17:44:46 +03:00
zabbix-error.yaml Update zabbix-error.yaml 2021-09-17 13:01:57 +05:30
zenphoto-sensitive-info.yaml Update zenphoto-sensitive-info.yaml 2021-10-19 17:45:19 +05:30
zhiyuan-oa-unauthorized.yaml Updated all templates tags with technologies (#3478) 2022-01-05 01:04:16 +05:30