nuclei-templates/http/misconfiguration/installer/bitrix24-installer.yaml

37 lines
811 B
YAML

id: bitrix24-installer
info:
name: Bitrix24 Installation Exposure
author: DhiyaneshDK
severity: high
metadata:
verified: true
max-request: 1
shodan-query: http.favicon.hash:-2115208104
tags: misconfig,bitrix24,install,exposure
http:
- method: GET
path:
- '{{BaseURL}}'
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'Start installation'
- 'Bitrix24'
condition: and
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200
# digest: 4b0a00483046022100ce1befacf1d264da511b1b9fe5d9a16de9dae0f6781e61fdc49627f6a301e32d022100b2690f631e5c1e902bf77cceb1da7fbac7fd00596d01b225b1b30111dfc1bf72:922c64590222798bb761d5b6d8e72950