Skip to content

Detect Microsoft SQL Server Reporting

ID: sql-server-reporting

Severity: info

Author: puzzlepeaches

Tags: tech,microsoft

id: sql-server-reporting
info:
name: Detect Microsoft SQL Server Reporting
author: puzzlepeaches
severity: info
metadata:
max-request: 1
tags: tech,microsoft
http:
- method: GET
path:
- "{{BaseURL}}/Reports/Pages/Folder.aspx"
matchers:
- type: word
words:
- "Report Manager"
# digest: 4a0a004730450220606b8ef56b8a1aaf513d07d4d23e261f155dcac189804c76b1a00865642b76b3022100c14f987d528e3a2db3868d9531bbf037f1e3f731360eb91e62960e0cdb78d154:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/technologies/microsoft/sql-server-reporting.yaml"

View on Github