setup-github-enterprise: Setup GitHub Enterprise - Detect

日期: 2025-08-01 | 影响软件: Setup GitHub Enterprise | POC: 已公开

漏洞描述

PoC代码[已公开]

id: setup-github-enterprise

info:
  name: Setup GitHub Enterprise - Detect
  author: tess
  severity: unknown
  classification:
    cpe: cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: github
    product: enterprise_server
    shodan-query: http.favicon.hash:-1373456171
  tags: misconfig,installer,github,setup,vuln

http:
  - method: GET
    path:
      - '{{BaseURL}}/setup/start'

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Setup GitHub Enterprise"
          - "Install GitHub Enterprise"
        condition: and

      - type: status
        status:
          - 200
# digest: 4b0a0048304602210093dab6c9eb94d9d4ccb0d152b18f74f61b4e6b5dee0cc23e4fe65a7cdc105303022100b56127c6e6572afb5cd8c1a1fbd19b0861410f232ee9d96ece1d215306331580:922c64590222798bb761d5b6d8e72950