Blackbox Exporter Metrics Exposed

What is the "Blackbox Exporter Metrics Exposed?" module?

The "Blackbox Exporter Metrics Exposed" module is designed to detect misconfigurations in the Blackbox Exporter software. It focuses on exposing metrics that may indicate potential vulnerabilities or issues with the configuration. This module has an informative severity level.

Impact

This module helps identify potential misconfigurations in the Blackbox Exporter software, which could lead to security vulnerabilities or performance issues. By exposing metrics, it allows users to assess the health and reliability of their Blackbox Exporter setup.

How the module works?

The "Blackbox Exporter Metrics Exposed" module works by sending an HTTP GET request to the "/metrics" endpoint. It then applies matching conditions to determine if the response indicates a misconfiguration or vulnerability.

The matching conditions for this module are:

- The response body must contain either "Blackbox exporter" or "blackbox_exporter_build_info" as words. - The response status code must be 200.

If both conditions are met, the module will report a potential vulnerability or misconfiguration.