netalertx-dashboard: NetAlert X Admin Dashboard - Exposed

id: netalertx-dashboard

info:
  name: NetAlert X Admin Dashboard - Exposed
  author: s4e-io
  severity: medium
  description: |
    Unauthorized access to the NetAlert X Admin Dashboard.
  reference:
    - https://github.com/jokob-sk/NetAlertX
  metadata:
    verified: true
    max-request: 2
    vendor: jokob-sk
    product: netalertx
    fofa-query: "NetAlert X"
  tags: netalertx,unauth,dashboard,misconfig

http:
  - method: GET
    path:
      - "{{BaseURL}}"
      - "{{BaseURL}}/devices.php"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "<title>NetAlertX"
          - "Sign out</a>"
          - "My Devices"
        condition: and

      - type: status
        status:
          - 200
# digest: 4b0a0048304602210081818a5995c9f27197ad09028eb811c72d5f32027e21c3af04d8e4a4628babfb022100d69e53e723dca4b4c08acbe05269b59d3f7648a16a429f564218ba836225b752:922c64590222798bb761d5b6d8e72950