Google Cloud Run Default Page

What is the "Google Cloud Run Default Page?"

The "Google Cloud Run Default Page" module is designed to detect misconfigurations in the default page of a Google Cloud Run application. Google Cloud Run is a serverless platform that allows you to run stateless containers in a fully managed environment. This module focuses on identifying potential vulnerabilities or misconfigurations in the default page of a Cloud Run application.

This module has an informative severity level, which means it provides valuable information but does not indicate a critical security issue. It is authored by dhiyaneshDK.

Impact

The impact of a misconfigured or vulnerable default page in a Google Cloud Run application can vary. It may expose sensitive information, allow unauthorized access, or provide an entry point for potential attacks. It is important to ensure that the default page is properly configured to minimize security risks.

How the module works?

The "Google Cloud Run Default Page" module works by sending HTTP requests to the target application and analyzing the responses. It uses specific matching conditions to identify if the default page contains certain content or if it returns a specific HTTP status code.

For example, one of the matching conditions checks if the response body contains the phrase "Congratulations | Cloud Run" and if the HTTP status code is 200. If both conditions are met, the module considers the default page as detected.

By detecting misconfigurations or vulnerabilities in the default page, this module helps ensure that your Google Cloud Run application is properly secured and follows best practices.

For more information about Google Cloud Run, you can refer to the official documentation.

Metadata:

- max-request: 1

- verified: true

- shodan-query: title:"Congratulations | Cloud Run"