Ansible Tower - Detect

ID: ansible-tower-exposure

Severity: info

Author: pdteam,idealphase

Tags: panel,ansible,redhat

Description

Ansible Tower was detected. Ansible Tower is a commercial offering that helps teams manage complex multi-tier deployments by adding control, knowledge, and delegation to Ansible-powered environments.

YAML Source

id: ansible-tower-exposure

info:
  name: Ansible Tower - Detect
  author: pdteam,idealphase
  severity: info
  description: Ansible Tower was detected. Ansible Tower is a commercial offering that helps teams manage complex multi-tier deployments by adding control, knowledge, and delegation to Ansible-powered environments.
  reference:
    - https://docs.ansible.com/ansible-tower/3.8.4/html/administration/
    - https://docs.ansible.com/ansible-tower/latest/html/release-notes/index.html
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
    cpe: cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: redhat
    product: ansible_tower
    shodan-query:
      - title:"Ansible Tower"
      - http.title:"ansible tower"
    google-query:
      - intitle:"Ansible Tower"
      - intitle:"ansible tower"
    fofa-query: title="ansible tower"
  tags: panel,ansible,redhat

http:
  - method: GET
    path:
      - '{{BaseURL}}'

    matchers:
      - type: word
        words:
          - "<title>Ansible Tower</title>"
          - "ansible-bootstrap"
        condition: or

    extractors:
      - type: regex
        group: 1
        part: body
        regex:
          - 'href="\/static\/assets\/favicon\.ico\?v=(.+)" \/>'
# digest: 4a0a004730450221009c1188ba463c46e67f8c1433eedb0f46a9425fe079e8220e1f2b8b91b7646b8702203ef09107d876a9deaf01ed82b200e2b79757c62f6d2c920b3b84338cacce71d0:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/exposed-panels/ansible-tower-exposure.yaml"

View on Github