Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Atlassian Bamboo Build Dashboard

By kannthu

Informative
Vidoc logoVidoc Module
#misconfig#atlassian#bamboo
Description

What is the "Atlassian Bamboo Build Dashboard" module?

The "Atlassian Bamboo Build Dashboard" module is a test case designed to detect misconfigurations in the Atlassian Bamboo Build Dashboard software. It is an informative module that helps identify potential vulnerabilities or issues related to the configuration of the software.

This module has a severity level of "informative," which means it provides valuable information but does not indicate a critical vulnerability.

This module was authored by DhiyaneshDK.

Impact

The impact of this module is to identify misconfigurations in the Atlassian Bamboo Build Dashboard software. By detecting these misconfigurations, users can take appropriate actions to secure their installations and ensure the software is functioning optimally.

How does the module work?

The "Atlassian Bamboo Build Dashboard" module works by sending HTTP requests to the target software and matching the responses against predefined conditions. It aims to identify specific patterns in the response that indicate the presence of the Atlassian Bamboo Build Dashboard.

One example of an HTTP request sent by this module is a GET request to the "/allPlans.action" path. The module expects the response to contain specific HTML elements, such as "Project", "Plan", and "Build". It also checks for a response status code of 200 and a content type of "text/html".

By analyzing the response and matching it against the defined conditions, the module determines whether the Atlassian Bamboo Build Dashboard is present and potentially misconfigured.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/allPlans.action
Matching conditions
word: <th>Project</th>, <th>Plan</th>, <th>Bui...and
word: text/htmland
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability