Skip to content

Drone CI Login Panel - Detect

ID: drone-ci-panel

Severity: info

Author: Yuzhe-zhang-0

Tags: panel,droneci,cicd

Drone CI login panel was detected.

id: drone-ci-panel
info:
name: Drone CI Login Panel - Detect
author: Yuzhe-zhang-0
severity: info
description: Drone CI login panel was detected.
reference:
- https://www.drone.io
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
metadata:
max-request: 1
shodan-query: http.favicon.hash:1354079303
tags: panel,droneci,cicd
http:
- method: GET
path:
- '{{BaseURL}}/welcome'
matchers-condition: and
matchers:
- type: word
words:
- '<title>Drone CI</title>'
- '<title>Drone | Continuous Integration</title>'
condition: or
- type: status
status:
- 200
# digest: 4a0a0047304502200154f31112ae746bbdcd80e883f37e14d07f3388e3a485c952ad9a10db5778e0022100c89813df7ea85419b06f147dff0d44b376752dcec0c5c017caa480036c242096:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/exposed-panels/drone-ci-panel.yaml"

View on Github