nuclei-templates/http/misconfiguration/locust-exposure.yaml

35 lines
789 B
YAML

id: locust-exposure
info:
name: Locust Exposure
author: DhiyaneshDK,bhutch
severity: medium
metadata:
verified: true
max-request: 1
shodan-query: title:"Locust"
tags: exposure,locust,misconfig
http:
- method: GET
path:
- '{{BaseURL}}'
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- '<title>Locust(?: for.+)?</title>'
- type: word
part: body
words:
- 'locust.js'
- 'Charts</a>'
condition: or
- type: status
status:
- 200
# digest: 4b0a00483046022100cf92c4071407a77d4445aac813abefa5868c87e7064e31e9f705da28375ef1d4022100e42053a60122a38633dc114db118460e5b1bb85ab0791669bcfb291e80ee2bae:922c64590222798bb761d5b6d8e72950