id: stackposts-installer

info:
  name: StackPosts Installation Page - Exposure
  author: DhiyaneshDK
  severity: high
  description: |
    Detects exposed StackPosts installation page.
  reference:
    - https://codecanyon.net/item/stackposts-social-marketing-tool/21747459
  metadata:
    verified: true
    max-request: 1
    shodan-query: html:"Install - StackPosts"
    fofa-query: icon_hash="700046539"
  tags: misconfig,install,exposure,stackposts,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/install/index.php"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Install - StackPosts - Social Marketing Tools"

      - type: status
        status:
          - 200
# digest: 4a0a0047304502206e8ca3eff567b873ff8186a5156e83a768bf221e888891d716d276e5a256a077022100b71f5a1cc679a0f2610e6cdabe5ad7baee1a0285e6f5b070bd4c66961b60d9e6:922c64590222798bb761d5b6d8e72950