fscan/WebScan/pocs/kubernetes-unauth.yml

11 lines
405 B
YAML

name: poc-yaml-kubernetes-unauth
rules:
- method: GET
path: /api/v1/nodes
expression: |
response.status == 200 && response.content_type.contains("application/json") && response.body.bcontains(b"\"kubeletVersion\": \"v") && response.body.bcontains(b"\"containerRuntimeVersion\"")
detail:
author: mumu0215(https://github.com/mumu0215)
links:
- http://luckyzmj.cn/posts/15dff4d3.html