diff --git a/http/misconfiguration/installer/growi-installer.yaml b/http/misconfiguration/installer/growi-installer.yaml new file mode 100644 index 00000000000..905628e1c0c --- /dev/null +++ b/http/misconfiguration/installer/growi-installer.yaml @@ -0,0 +1,29 @@ +id: growi-installer + +info: + name: GROWI Installer - Exposure + author: DhiyaneshDk + severity: high + description: | + Checks for the presence of a GROWI Installer. + metadata: + verified: true + max-request: 1 + shodan-query: html:"Installer - GROWI" + tags: install,growi,exposure,misconfig + +http: + - method: GET + path: + - "{{BaseURL}}/installer" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "Installer - GROWI" + + - type: status + status: + - 200