raspberry-shake-config: Raspberry Shake Config Detection

2025-08-01 raspberry shake config PoC Public

Description

The Shake Board digitizer receives, processes, and interprets the sensor data in real-time, allowing for the Raspberry Pi computer to export the data for easy access. The data output can be displayed and analyzed using our own comprehensive set of web tools or any standard seismological software.

PoC

id: raspberry-shake-config

info:
  name: Raspberry Shake Config Detection
  author: pussycat0x
  severity: medium
  description: |
    The Shake Board digitizer receives, processes, and interprets the sensor data in real-time, allowing for the Raspberry Pi computer to export the data for easy access. The data output can be displayed and analyzed using our own comprehensive set of web tools or any standard seismological software.
  metadata:
    verified: true
    max-request: 1
    shodan-query: title:"Raspberry Shake Config"
  tags: misconfig,unauth,iot,raspberry,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Raspberry Shake Config"

      - type: status
        status:
          - 200
# digest: 4a0a0047304502202fc76a6f916d7f71068f328d9cf2dcbcd880710ee4d8b6f3a87bccc2acac19bd02210096da484b1f5f4874f501764f6f194138c50645b42f7f1ff76cf45c8459311921:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/iot/raspberry-shake-config.yaml

References

Related Vulnerabilities