From 5c06a669022c0c3fa4e5c390926fd9a6c82c0022 Mon Sep 17 00:00:00 2001 From: pussycat0x <65701233+pussycat0x@users.noreply.github.com> Date: Mon, 26 Dec 2022 16:54:39 +0530 Subject: [PATCH 1/2] Add files via upload --- .../installer/concrete-installer.yaml | 33 +++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 misconfiguration/installer/concrete-installer.yaml diff --git a/misconfiguration/installer/concrete-installer.yaml b/misconfiguration/installer/concrete-installer.yaml new file mode 100644 index 00000000000..8550ef635e4 --- /dev/null +++ b/misconfiguration/installer/concrete-installer.yaml @@ -0,0 +1,33 @@ +id: concrete-installer + +info: + name: Concrete Installer + author: pussycat0x + severity: high + metadata: + verified: true + shodan-query: title:"Install concrete" + tags: misconfig,exposure,install,concrete + +requests: + - method: GET + path: + - '{{BaseURL}}/index.php/install' + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "install concrete" + - "choose language" + condition: and + case-insensitive: true + - type: word + part: header + words: + - "text/html" + + - type: status + status: + - 200 From 197d84a3e0b0e0d158d6ea172681f9fc41154930 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Tue, 27 Dec 2022 16:47:00 +0530 Subject: [PATCH 2/2] format-changes --- misconfiguration/installer/concrete-installer.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/misconfiguration/installer/concrete-installer.yaml b/misconfiguration/installer/concrete-installer.yaml index 8550ef635e4..10bba3dccf7 100644 --- a/misconfiguration/installer/concrete-installer.yaml +++ b/misconfiguration/installer/concrete-installer.yaml @@ -12,7 +12,7 @@ info: requests: - method: GET path: - - '{{BaseURL}}/index.php/install' + - "{{BaseURL}}/index.php/install" matchers-condition: and matchers: @@ -23,6 +23,7 @@ requests: - "choose language" condition: and case-insensitive: true + - type: word part: header words: