Skip to content

Virtual SmartZone Setup Wizard - Exposure

ID: virtual-smartzone-installer

Severity: high

Author: DhiyaneshDK

Tags: misconfig,install,exposure,virtual-smartzone

Detects exposed Virtual SmartZone Installation page.

id: virtual-smartzone-installer
info:
name: Virtual SmartZone Setup Wizard - Exposure
author: DhiyaneshDK
severity: high
description: |
Detects exposed Virtual SmartZone Installation page.
reference:
- https://support.ruckuswireless.com/products/83-virtual-smartzone-vsz
metadata:
verified: true
max-request: 1
shodan-query: html:"Virtual SmartZone"
tags: misconfig,install,exposure,virtual-smartzone
http:
- method: GET
path:
- "{{BaseURL}}/adminweb/"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "Virtual SmartZone"
- "Setup Wizard"
condition: and
- type: status
status:
- 200
# digest: 4b0a0048304602210082294574aeb48577760901015049abf6442f300f31dcd8579060811f453b9b09022100fe607c9686ddbc1244bdd39b86bd4ebe1fc49c2f3d2c88e64e82a14f28cc9c05:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/misconfiguration/installer/virtual-smartzone-installer.yaml"

View on Github