id: aem-debugging-libraries

info:
  name: Adobe AEM Debugging Client Libraries
  author: dhiyaneshDk
  severity: info
  reference:
    - https://aem4beginner.blogspot.com/debugging-client-libraries
    - https://adobe-consulting-services.github.io/acs-aem-tools/features/dumplibs/index.html
  classification:
    cpe: cpe:2.3:a:adobe:acs_aem_commons:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 5
    vendor: adobe
    product: acs_aem_commons
    shodan-query:
      - http.title:"AEM Sign In"
      - http.component:"Adobe Experience Manager"
  tags: misconfig,aem,adobe,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/libs/cq/ui/content/dumplibs.html"
      - "{{BaseURL}}/libs/granite/ui/content/dumplibs.validate.html"
      - "{{BaseURL}}/libs/granite/ui/content/dumplibs.rebuild.html"
      - "{{BaseURL}}/libs/granite/ui/content/dumplibs.test.html"
      - "{{BaseURL}}/libs/granite/ui/content/dumplibs.html"

    stop-at-first-match: true
    matchers:
      - type: word
        part: body
        words:
          - '<title>Client Libraries</title>'
          - '<title>Rebuild Client Libraries</title>'
          - '<title>Client Libraries Test Output</title>'
        condition: or
# digest: 4b0a00483046022100ec4e9ac2dc1f84ba03444b2d9223cc8856457dae8c4ee615d25b3c4a53d6bc34022100e42cbb602c6edba4124f96b94d6ec7d940afd3008035f7895c06d746b81b7f82:922c64590222798bb761d5b6d8e72950