phpmemcached-admin-panel: phpMemcachedAdmin Panel

漏洞描述

phpMemcachedAdmin Panel is exposed.

PoC代码[已公开]

id: phpmemcached-admin-panel

info:
  name: phpMemcachedAdmin Panel
  author: tess
  severity: medium
  description: phpMemcachedAdmin Panel is exposed.
  metadata:
    verified: true
    max-request: 1
    shodan-query: title:"phpMemcachedAdmin"
  tags: phpmemcached,exposure,misconfig

http:
  - method: GET
    path:
      - '{{BaseURL}}'

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "phpMemcachedAdmin"
          - "Execute Commands on Servers"
        condition: and
        case-insensitive: true

    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - "MemcachedAdmin ([0-9.]+)"
# digest: 4a0a0047304502201785f5ba4d5285dd642ed2d3d3c515999d1ea5470b6c0c582f897f36e518e2be022100c254a6776ecb77983a0c66af58d7e14654a07eb3828364ee213cf7422a8312c2:922c64590222798bb761d5b6d8e72950

来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/./http/misconfiguration/phpmemcached-admin-panel.yaml