Skip to content
Nuclei Templates

GLPI Directory Listing

ID: glpi-directory-listing

Severity: low

Author: RedTeamBrasil,ImNightmaree

Tags: glpi,misconfig

Description

Section titled “Description”

In certain cases, system administrators leave directory listing enabled which can sometimes expose sensitive files.

YAML Source

Section titled “YAML Source”
id: glpi-directory-listing


info:
  name: GLPI Directory Listing
  author: RedTeamBrasil,ImNightmaree
  severity: low
  description: In certain cases, system administrators leave directory listing enabled which can sometimes expose sensitive files.
  metadata:
    max-request: 2
  tags: glpi,misconfig


http:
  - raw:
      - |
        GET {{expose_data}} HTTP/1.1
        Host: {{Hostname}}


    payloads:
      expose_data:
        - /glpi/files/
        - /glpi/


    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Index of /glpi/"


      - type: status
        status:
          - 200
# digest: 4a0a0047304502200f28b7a6d6fa7f8e89dc3e3ef2913ba4aeb96c5b89685215ba449b37d929bc35022100b2284098a1801bec6a484ed81636cf30a347c4ebfc5cd7f17db2b114155619a1:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/misconfiguration/glpi-directory-listing.yaml"

View on Github