label-studio-signup: Label Studio - Sign-up Detect

日期: 2025-08-01 | 影响软件: Label Studio | POC: 已公开

漏洞描述

Detects the presence of the Label Studio sign-up.

PoC代码[已公开]

id: label-studio-signup

info:
  name: Label Studio - Sign-up Detect
  author: DhiyaneshDK
  severity: unknown
  description: |
    Detects the presence of the Label Studio sign-up.
  classification:
    cpe: cpe:2.3:a:heartex:label_studio:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: heartex
    product: label_studio
    shodan-query: http.favicon.hash:-1649949475
  tags: label-studio,sign-up,misconfig

http:
  - raw:
      - |
        GET /user/signup HTTP/1.1
        Host: {{Hostname}}
        Accept: */*

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Label Studio"
          - "Sign up"
          - "Create Account"
        condition: and

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100dd050c0b3d92b92ecc6220064f241f0ac3fda2922299d44e960c9b67c5f295b7022100cba508a6e0a8423b2144be7e1b41b7171848495d058ff3571cf47525ee7197fc:922c64590222798bb761d5b6d8e72950

相关漏洞推荐