nuclei-templates/misconfiguration/nextcloud-install.yaml

29 lines
712 B
YAML

id: nextcloud-install
info:
name: Nextcloud Exposed Installation
author: skeltavik
severity: high
reference:
- https://docs.nextcloud.com/server/latest/admin_manual/installation/installation_wizard.html
tags: tech,nextcloud,storage
requests:
- method: GET
path:
- '{{BaseURL}}'
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
part: body
words:
- '<fieldset id="adminaccount"><legend>Create an <strong>admin account</strong></legend>'
- '<legend><a id="showAdvanced" tabindex="0" href="#">Storage &amp; database'
condition: and
- type: status
status:
- 200