feat: add curated internal network pocs

2026-09-26 21:21:53 +08:00 · 2026-07-16 01:45:09 +08:00
parent 61ae87d171
commit 621b2c2f24
52 changed files with 1230 additions and 0 deletions
@@ -0,0 +1,21 @@
+id: kubernetes-metrics
+
+info:
+  name: Detect Kubernetes Exposed Metrics
+  author: pussycat0x
+  severity: low
+  verified: false
+  description: |-
+    Information Disclosure of Garbage Collection
+  reference:
+    - https://kubernetes.io/docs/concepts/cluster-administration/system-metrics/#metrics-in-kubernetes
+  tags: kubernetes,metrics,detect
+  created: 2024/01/05
+
+rules:
+  r0:
+    request:
+      method: GET
+      path: /metrics
+    expression: response.status == 200 && response.body.bcontains(b"namespace") && response.body.bcontains(b"HELP") && response.body.bcontains(b"TYPE") && response.body.bcontains(b"kube")
+expression: r0()