netalertx-dashboard: NetAlert X Admin Dashboard - Exposed

id: netalertx-dashboard

info:
  name: NetAlert X Admin Dashboard - Exposed
  author: s4e-io
  severity: medium
  description: |
    Unauthorized access to the NetAlert X Admin Dashboard.
  reference:
    - https://github.com/jokob-sk/NetAlertX
  metadata:
    verified: true
    max-request: 2
    vendor: jokob-sk
    product: netalertx
    fofa-query: "NetAlert X"
  tags: netalertx,unauth,dashboard,misconfig,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"
      - "{{BaseURL}}/devices.php"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "<title>NetAlertX"
          - "Sign out</a>"
          - "My Devices"
        condition: and

      - type: status
        status:
          - 200
# digest: 4a0a004730450221009fbd909238e90e62994a912a021935a16475b7bdabde0fa538182ce9721eedfe02204f74b5b647975a70c296c9ccc489489af78c9cbd2e013fa027d627c3008d5018:922c64590222798bb761d5b6d8e72950