Skip to content

default-wamp-server-page

ID: wamp-server-configuration

Severity: medium

Author: pussycat0x

Tags: wamp,exposure,misconfig

Wamp default page will expose sensitive configuration and vhosts.

id: wamp-server-configuration
info:
name: default-wamp-server-page
author: pussycat0x
severity: medium
description: Wamp default page will expose sensitive configuration and vhosts.
reference: https://www.exploit-db.com/ghdb/6891.
metadata:
max-request: 1
tags: wamp,exposure,misconfig
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: dsl
dsl:
- 'contains(tolower(body), "wampserver")'
- type: status
status:
- 200
# digest: 4a0a0047304502207e74fada51532c11d98f64f5b0c96758072f4676f4e5f14367fb4232620762220221008a8e35422d896675e14ff08f03fb1f9e3e28f94b365c39902edd92eac5ea5e10:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/misconfiguration/wamp-server-configuration.yaml"

View on Github