Create oracle-ebs-registration-enabled.yaml

http/misconfiguration/oracle-ebs-registration-enabled.yaml

@@ -0,0 +1,35 @@
+id: oracle-ebs-registration-enabled
+
+info:
+  name: Oracle EBS - Registration Enabled
+  author: theamanrawat
+  severity: info
+  description: |
+    Detected if the User Management (UMX) Self-Service Registration page is accessible in Oracle E-Business Suite. This feature allows external users to create accounts, which may not be desirable for all deployments.
+  reference:
+    - https://docs.oracle.com/cd/E18727_01/doc.121/e12843/T156458T156461.htm
+  metadata:
+    shodan-query: html:"OA_HTML"
+    fofa-query: body="OA_HTML"
+  tags: oracle,ebs,registration,exposure
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/OA_HTML/OA.jsp?page=/oracle/apps/fnd/umx/login/webui/NewUserRegPG"
+      - "{{BaseURL}}/OA_HTML/ibeCAcpSSOReg.jsp"
+
+    stop-at-first-match: true
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "Register"
+          - "OA_HTML/loadCSRFGuard"
+          - "OA_MEDIA"
+        condition: and
+
+      - type: status
+        status:
+          - 200