raspberry-shake-config: Raspberry Shake Config Detection

日期: 2025-08-01 | 影响软件: raspberry shake config | POC: 已公开

漏洞描述

The Shake Board digitizer receives, processes, and interprets the sensor data in real-time, allowing for the Raspberry Pi computer to export the data for easy access. The data output can be displayed and analyzed using our own comprehensive set of web tools or any standard seismological software.

PoC代码[已公开]

id: raspberry-shake-config

info:
  name: Raspberry Shake Config Detection
  author: pussycat0x
  severity: medium
  description: |
    The Shake Board digitizer receives, processes, and interprets the sensor data in real-time, allowing for the Raspberry Pi computer to export the data for easy access. The data output can be displayed and analyzed using our own comprehensive set of web tools or any standard seismological software.
  metadata:
    verified: true
    max-request: 1
    shodan-query: title:"Raspberry Shake Config"
  tags: misconfig,unauth,iot,raspberry,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Raspberry Shake Config"

      - type: status
        status:
          - 200
# digest: 4a0a0047304502202fc76a6f916d7f71068f328d9cf2dcbcd880710ee4d8b6f3a87bccc2acac19bd02210096da484b1f5f4874f501764f6f194138c50645b42f7f1ff76cf45c8459311921:922c64590222798bb761d5b6d8e72950