mirror of
https://github.com/lunchcat/sif.git
synced 2026-07-28 14:37:01 -07:00
TigahandGitHub
1f3708531d
Detect unauthenticated web database browsers, which ship with no default auth and hand over a full data browser once reachable. Each keys on an app-specific anchor (the ME_SETTINGS global, the redisCommander.js script, ace-pgsql.js) under an and-condition so a branded soft-404 cannot trip it. mongo-express also requires the database-list heading, since its login form renders the same settings global, title and logo but serves no data.
35 lines
646 B
YAML
35 lines
646 B
YAML
# pgweb Panel Detection Module
|
|
|
|
id: pgweb-panel
|
|
info:
|
|
name: pgweb Panel
|
|
author: sif
|
|
severity: high
|
|
description: Detects an exposed pgweb PostgreSQL browser, which ships with no built-in authentication
|
|
tags: [pgweb, postgresql, database, panel, exposure, recon]
|
|
|
|
type: http
|
|
|
|
http:
|
|
method: GET
|
|
paths:
|
|
- "{{BaseURL}}/"
|
|
|
|
matchers:
|
|
- type: status
|
|
status:
|
|
- 200
|
|
|
|
- type: word
|
|
part: body
|
|
words:
|
|
- "static/js/ace-pgsql.js"
|
|
|
|
- type: word
|
|
part: body
|
|
condition: or
|
|
words:
|
|
- '<title>pgweb</title>'
|
|
- 'id="table_connection"'
|
|
- 'id="close_connection"'
|