Skip to content

Forgejo Installation Page - Exposure

ID: forgejo-installer

Severity: high

Author: DhiyaneshDk

Tags: install,Forgejo,misconfig

Checks for the presence of a Forgejo Installer Page.

id: forgejo-installer
info:
name: Forgejo Installation Page - Exposure
author: DhiyaneshDk
severity: high
description: |
Checks for the presence of a Forgejo Installer Page.
metadata:
verified: true
max-request: 1
fofa-query: body="Installation - Forgejo:"
tags: install,Forgejo,misconfig
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "<title>Installation - Forgejo: Beyond coding. We Forge.</title>"
- type: status
status:
- 200
# digest: 490a00463044022060fe827438ce3ed62d1f02705d7d7acbba7cf9761d532702badf0144a212dcb80220632b77fb04178d643aa597081f064c4734a2923a9c91d4dd2dee3f5d57fd4082:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/misconfiguration/installer/forgejo-installer.yaml"

View on Github