adguard-installer: AdGuard - Installation

漏洞描述

AdGuard Installation panel has been exposed.

PoC代码[已公开]

id: adguard-installer

info:
  name: AdGuard - Installation
  author: ritikchaddha
  severity: high
  description: |
    AdGuard Installation panel has been exposed.
  classification:
    cpe: cpe:2.3:a:adguard:adguard:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: adguard
    product: adguard
    fofa-query: title="Setup AdGuard Home"
  tags: adguard,misconfig,install,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/install.html"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'Setup AdGuard Home'

      - type: status
        status:
          - 200
# digest: 490a0046304402200e158d67e11539967ea560f5899321b99a7ffd9673aeef5a28a492ef9be009bd02205391a056992c98ecc0937e835005e82c0732953f88caf6798c26437c7f48b95d:922c64590222798bb761d5b6d8e72950

来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/installer/adguard-installer.yaml