Skip to content

Cyber Power Systems - Unauthenticated

ID: unauth-cyber-power-systems

Severity: high

Author: DhiyaneshDK

Tags: unauth,cyber-power,misconfig

Detects unauthenticated access to Cyber Power Systems, which could lead to unauthorized control or information disclosure.

id: unauth-cyber-power-systems
info:
name: Cyber Power Systems - Unauthenticated
author: DhiyaneshDK
severity: high
description: |
Detects unauthenticated access to Cyber Power Systems, which could lead to unauthorized control or information disclosure.
metadata:
verified: true
max-request: 1
shodan-query: html:"<title>PDNU</title>"
tags: unauth,cyber-power,misconfig
http:
- method: GET
path:
- "{{BaseURL}}/#/devices"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
part: body
words:
- "<title>PDNU</title>"
- type: status
status:
- 200
# digest: 480a00453043021f1001592fdf6b658c5e7cfa00f25c38ea12b6828bc4b568109495d2fc576c36022040c66d22a274d83b23db3b86430e38c073e818f40672c76ba0ff269417524554:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/misconfiguration/unauth-cyber-power-systems.yaml"

View on Github