jupyter-notebook-unauthorized-access: Jupyter Notebook Unauthorized Access

漏洞描述

Jupyter Notebook Unauthorized Access

PoC代码[已公开]

id: jupyter-notebook-unauthorized-access

info:
  name: Jupyter Notebook Unauthorized Access
  author: bufsnake
  severity: high
  verified: false
  description: |-
    Jupyter Notebook Unauthorized Access
  tags: jupyter,notebook,unauth
  created: 2023/07/07

rules:
  r0:
    request:
      method: GET
      path: /terminals/3
    expression: response.status == 200 && response.body.bcontains(b"terminals/websocket") && !response.body.bcontains(b"Password:")
expression: r0()

来源: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/unauthorized/jupyter-notebook-unauthorized-access.yaml