Skip to content
Nuclei Templates

Nexus Repository Manager (NRM) Instance Detection Template

ID: nexus-detect

Severity: info

Author: righettod

Tags: tech,nexus

Description

Section titled “Description”

Try to detect the presence of a NRM instance via the REST API OpenDocument descriptor.

YAML Source

Section titled “YAML Source”
id: nexus-detect


info:
  name: Nexus Repository Manager (NRM) Instance Detection Template
  author: righettod
  severity: info
  description: |
    Try to detect the presence of a NRM instance via the REST API OpenDocument descriptor.
  classification:
    cpe: cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: sonatype
    product: nexus_repository_manager
    shodan-query: http.html:"Nexus Repository Manager"
  tags: tech,nexus


http:
  - method: GET
    path:
      - "{{BaseURL}}/service/rest/swagger.json"


    matchers-condition: and
    matchers:
      - type: word
        words:
          - "Nexus Repository Manager"


      - type: status
        status:
          - 200
# digest: 4b0a00483046022100ac479ba4db8011f572f73e551f4a3ad6c71260097413bf1bf191657fe0af7579022100ee83457776a3ffd29b9b236c8eea817ea0cef787f5f20bf6c610114eb73643d5:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/technologies/nexus-detect.yaml"

View on Github