nagios-logserver-installer: Nagios Log Server - Install

漏洞描述

Detects the presence of a Nagios Log Server installation page, which can expose configuration setup information or initialization steps.

PoC代码[已公开]

id: nagios-logserver-installer

info:
  name: Nagios Log Server - Install
  author: ritikchaddha
  severity: high
  description: |
    Detects the presence of a Nagios Log Server installation page, which can expose configuration setup information or initialization steps.
  metadata:
    verified: true
    max-request: 1
    fofa-query: title="Install &middot; Nagios Log Server"
    shodan-query: title:"Install &middot; Nagios Log Server"
  tags: misconfig,install,nagios,nagios-logserver,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/nagioslogserver/install"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Nagios Log Server"
          - "Install</a>"
        condition: and

      - type: status
        status:
          - 200
# digest: 4a0a00473045022100e95d917df842b3ca1f7745b1cecfa2b6f2dad3762c4190903156eaf25215d95302204ab884c22f2f39375fa203925bb380b42ebcdb40ba174e68366d10bb907b498b:922c64590222798bb761d5b6d8e72950

来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/installer/nagios-logserver-installer.yaml