Skip to content

Nexus Login Panel - Detect

ID: nexus-panel

Severity: info

Author: righettod

Tags: panel,nexus,login,detect

Nexus login panel was detected.

id: nexus-panel
info:
name: Nexus Login Panel - Detect
author: righettod
severity: info
description: |
Nexus login panel was detected.
reference:
- https://www.sonatype.com/products/sonatype-nexus-repository
metadata:
verified: true
max-request: 1
shodan-query: http.title:"Sonatype Nexus Repository"
tags: panel,nexus,login,detect
http:
- method: GET
path:
- "{{BaseURL}}"
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains_any(to_lower(body), "<title>sonatype nexus repository", "content=\"sonatype nexus repository", "nexus-coreui-bundle")'
condition: and
extractors:
- type: regex
part: body
group: 1
regex:
- '_v=([0-9\.\-]+)'
# digest: 4b0a00483046022100a7f2bf9be7d5333339a3b972e41d4aba61af20d0e0a78acc95dcbfee2c5c3b01022100e63f6d8ea71c64e26883e8b535bdf1d5799fd83ef2b0297af0d9457371f4da74:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/exposed-panels/nexus-panel.yaml"

View on Github