mirror of
https://github.com/shadow1ng/fscan.git
synced 2026-09-22 03:10:42 +08:00
20 lines
530 B
YAML
20 lines
530 B
YAML
id: hadoop-disclosure
|
|
|
|
info:
|
|
name: Apache Hadoop Disclosure
|
|
author: zan8in
|
|
severity: low
|
|
verified: true
|
|
description: |-
|
|
Apache Hadoop 存在目录浏览漏洞，攻击者可以通过访问/dfshealth.html来获取Hadoop集群的配置信息。
|
|
tags: hadoop,disclosure
|
|
created: 2023/10/29
|
|
|
|
rules:
|
|
r0:
|
|
request:
|
|
method: GET
|
|
path: /dfshealth.html
|
|
expression: response.status == 200 && response.body.bcontains(b'class="navbar-brand"') && response.body.bcontains(b'dfshealth.js')
|
|
expression: r0()
|