revive-adserver-installer: Revive Adserver - Exposed Installer

2026-04-09 Revive Adserver PoC Public

Description

Detected exposed Revive Adserver installation wizard that allows unauthorized installation and configuration.

PoC

id: revive-adserver-installer

info:
  name: Revive Adserver - Exposed Installer
  author: DhiyaneshDk
  severity: high
  description: |
    Detected exposed Revive Adserver installation wizard that allows unauthorized installation and configuration.
  reference:
    - https://github.com/revive-adserver/revive-adserver
    - https://www.revive-adserver.com/support/installation/
    - https://documentation.revive-adserver.com/
  metadata:
    verified: true
    max-request: 2
    shodan-query: html:"Installing Revive Adserver"
  tags: misconfig,revive,adserver,exposure,unauth

http:
  - method: GET
    path:
      - "{{BaseURL}}/www/admin/install.php?action=welcome"
      - "{{BaseURL}}/admin/install.php?action=welcome"

    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: word
        words:
          - "Installing Revive Adserver"
          - "installer"
        condition: and

      - type: status
        status:
          - 200
# digest: 490a00463044022064379876335f04e0e1b889c92e4b5046c337eebfae79faa3dad7bf416e1dbb7a02204c709c84635efa9c1cd57542a414678b4996612d5a4751e051ed9e174a572788:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/installer/revive-adserver-installer.yaml

References

Related Vulnerabilities