Skip to content

SEO King - Shopify App — Installer

ID: shopify-app-installer

Severity: info

Author: tess

Tags: misconfig,shopify,install

Shopify App is susceptible to the Installation page exposure due to misconfiguration.

id: shopify-app-installer
info:
name: SEO King - Shopify App — Installer
author: tess
severity: info
description: Shopify App is susceptible to the Installation page exposure due to misconfiguration.
metadata:
verified: true
max-request: 1
shodan-query: title:"Shopify App — Installation"
tags: misconfig,shopify,install
http:
- method: GET
path:
- '{{BaseURL}}'
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'Shopify App — Installation'
- 'example.myshopify.com'
condition: and
- type: status
status:
- 200
# digest: 4a0a00473045022100b395edf4785695ccadbff5d48e1577f25baa3b636ffd163358056a8f9143728702201aa4218488008f2361d0ab408e5d96250a18363eee7dbdcffe6db765e5286ced:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/misconfiguration/installer/shopify-app-installer.yaml"

View on Github