Skip to content

ChirpStack LoRaWAN Detection

ID: chirpstack-login

Severity: info

Author: ProjectDiscoveryAI

Tags: panel,chirpstack

Detects the presence of ChirpStack LoRaWAN Network-Server by identifying unique page characteristics in the HTML response.

id: chirpstack-login
info:
name: ChirpStack LoRaWAN Detection
author: ProjectDiscoveryAI
severity: info
description: |
Detects the presence of ChirpStack LoRaWAN Network-Server by identifying unique page characteristics in the HTML response.
reference:
- https://www.chirpstack.io/docs/chirpstack/use/login.html
metadata:
verified: true
max-request: 1
shodan-query: http.title:"ChirpStack LoRaWAN"
fofa-query: title="ChirpStack LoRaWAN"
tags: panel,chirpstack
http:
- method: GET
path:
- "{{BaseURL}}"
matchers:
- type: word
part: body
words:
- "ChirpStack LoRaWAN"
# digest: 490a004630440220714e70501a8eb5b9c1a83dcfb6e8be1627da7cf56dfbb908a72c2ebcf405776c02204d4ebcbd05d9b810a752e78a77c51980ae862ff7e7efb87d6b779b67a318c445:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/exposed-panels/chirpstack-login.yaml"

View on Github