漏洞描述
NSQ admin panel was detected.
id: nsq-admin-panel
info:
name: NSQ Admin Panel - Detect
author: random-robbie
severity: medium
description: NSQ admin panel was detected.
reference:
- https://nsq.io/components/nsqd.html
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
cvss-score: 6.5
cwe-id: CWE-200
metadata:
verified: true
max-request: 1
shodan-query: title:"nsqadmin"
tags: nsq,admin,panel,exposure,discovery
http:
- method: GET
path:
- '{{BaseURL}}'
matchers-condition: and
matchers:
- type: word
words:
- '<title>nsqadmin</title>'
- type: status
status:
- 200
extractors:
- type: regex
part: body
group: 1
regex:
- "nsqadmin/v([0-9.]+)"
# digest: 490a00463044022010fe0abada44296601eff856073ed634b9eebde08a41deb3b5f54f70eab1aebd02202576e5159f9c6eb5fa513ebff56a5fc475d6e091bc5fb3b6fddcac22839e6ca2:922c64590222798bb761d5b6d8e72950