id: blackbox-exporter-metrics

info:
  name: Blackbox Exporter Metrics Exposed
  author: DhiyaneshDk
  severity: info
  metadata:
    verified: true
    max-request: 1
    shodan-query: title:"Blackbox Exporter"
  tags: blackbox,exposure,debug,misconfig,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/metrics"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Blackbox exporter"
          - "blackbox_exporter_build_info"
        condition: or

      - type: status
        status:
          - 200
# digest: 490a0046304402206c0be25ad773d78ac5e864cf9d1b974da406b5f9d32813d2269b7ef4d3890271022074769ecce11276d5d3b8dc03ef704971aa9f4a12996d72862aec8bcc03b3d32b:922c64590222798bb761d5b6d8e72950