mirror of
https://github.com/lunchcat/sif.git
synced 2026-07-28 14:37:01 -07:00
TigahandGitHub
1f3708531d
Detect unauthenticated web database browsers, which ship with no default auth and hand over a full data browser once reachable. Each keys on an app-specific anchor (the ME_SETTINGS global, the redisCommander.js script, ace-pgsql.js) under an and-condition so a branded soft-404 cannot trip it. mongo-express also requires the database-list heading, since its login form renders the same settings global, title and logo but serves no data.
35 lines
682 B
YAML
35 lines
682 B
YAML
# Redis Commander Panel Detection Module
|
|
|
|
id: redis-commander-panel
|
|
info:
|
|
name: Redis Commander Panel
|
|
author: sif
|
|
severity: high
|
|
description: Detects an exposed Redis Commander admin panel serving its key browser without authentication
|
|
tags: [redis-commander, redis, database, panel, exposure, recon]
|
|
|
|
type: http
|
|
|
|
http:
|
|
method: GET
|
|
paths:
|
|
- "{{BaseURL}}/"
|
|
|
|
matchers:
|
|
- type: status
|
|
status:
|
|
- 200
|
|
|
|
- type: word
|
|
part: body
|
|
words:
|
|
- "scripts/redisCommander.js"
|
|
|
|
- type: word
|
|
part: body
|
|
condition: or
|
|
words:
|
|
- "Redis Commander:"
|
|
- "RedisCommandLogo.png"
|
|
- 'id="keyTreeActions"'
|