Skip to content

VerneMQ Status Page

ID: vernemq-status-page

Severity: low

Author: geeknik

Tags: misconfig,vernemq,status

VerneMQ Status Page is exposed.

id: vernemq-status-page
info:
name: VerneMQ Status Page
author: geeknik
severity: low
description: VerneMQ Status Page is exposed.
reference:
- https://github.com/vernemq/vernemq
metadata:
max-request: 1
tags: misconfig,vernemq,status
http:
- method: GET
path:
- '{{BaseURL}}/status'
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'VerneMQ'
- 'Issues'
- 'Cluster Overview'
- 'Node Status'
condition: and
- type: status
status:
- 200
# digest: 4b0a00483046022100bb98db384e3495b227255470bbb66dc3330351a31a1e392a81605c807739bdab022100a3bb97b96ed7c712a53151cd6f358c34fd4e95ed281c28e2a5966094dc962c18:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/misconfiguration/vernemq-status-page.yaml"

View on Github