nuclei-templates/misconfiguration/gocd/gocd-cruise-configuration.yaml

32 lines
840 B
YAML

id: gocd-cruise-configuration
info:
name: GoCd Cruise Configuration disclosure
author: dhiyaneshDk
severity: high
reference:
- https://attackerkb.com/assessments/9101a539-4c6e-4638-a2ec-12080b7e3b50
- https://blog.sonarsource.com/gocd-pre-auth-pipeline-takeover
- https://twitter.com/wvuuuuuuuuuuuuu/status/1456316586831323140
metadata:
shodan-query: http.title:"Create a pipeline - Go",html:"GoCD Version"
tags: go,gocd,config,exposure,misconfig
requests:
- method: GET
path:
- "{{BaseURL}}/go/add-on/business-continuity/api/cruise_config"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "server agentAutoRegisterKey"
- "webhookSecret"
- "tokenGenerationKey"
condition: and