diff --git a/misconfiguration/espeasy-mega-exposure.yaml b/misconfiguration/espeasy-mega-exposure.yaml new file mode 100644 index 00000000000..38c4af77ee4 --- /dev/null +++ b/misconfiguration/espeasy-mega-exposure.yaml @@ -0,0 +1,29 @@ +id: espeasy-mega-exposure + +info: + name: ESPEasy Mega Panel Exposure + author: ritikchaddha + severity: high + metadata: + verified: true + shodan-query: http.html:"ESP Easy Mega" + tags: misconfig,espeasy,exposure + +requests: + - method: GET + path: + - "{{BaseURL}}" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "ESP Easy Mega:" + - "Config" + - "Tools" + condition: and + + - type: status + status: + - 200