Files
nuclei-templates/network/exposures/exposed-dockerd.yaml
2024-12-01 13:57:55 +00:00

26 lines
765 B
YAML

id: exposed-dockerd
info:
name: Docker Daemon Exposed
author: arafatansari
severity: critical
description: |
Docker Daemon exposed on the network map can help remote attacker to gain access to the Docker containers and potentially the host system.
metadata:
verified: true
max-request: 1
shodan-query: port:2375 product:"docker"
tags: network,docker,exposure,tcp
tcp:
- inputs:
- data: "Docker:\nVersion:\n"
host:
- "{{Hostname}}"
port: 2375
matchers:
- type: word
words:
- "Server: Docker"
# digest: 4a0a00473045022019a3f37bb423f8bbfa87d2f13b8900f103398ce078db0e1d59ba8b5112dd8cfa022100a4b1541ef954b1d7dc4e02971478eea351457d369c8607065d3162c4dc6759ba:922c64590222798bb761d5b6d8e72950