mirror of
https://github.com/shadow1ng/fscan.git
synced 2026-09-26 05:01:53 +08:00
feat: add curated internal network pocs
This commit is contained in:
@@ -0,0 +1,19 @@
|
||||
id: apache-druid-unauth
|
||||
|
||||
info:
|
||||
name: Apache Druid Unauth
|
||||
author: zan8in
|
||||
severity: high
|
||||
verified: true
|
||||
description: |-
|
||||
app="Apache Druid"
|
||||
tags: druid,unauth
|
||||
created: 2024/01/07
|
||||
|
||||
rules:
|
||||
r0:
|
||||
request:
|
||||
method: GET
|
||||
path: /unified-console.html
|
||||
expression: response.status == 200 && response.body.ibcontains(b'<title>Apache Druid</title>')
|
||||
expression: r0()
|
||||
Reference in New Issue
Block a user