id: nginx-status

info:
  name: Nginx Status Page
  author: dhiyaneshDK
  severity: info
  metadata:
    max-request: 2
  tags: misconfig,nginx,status,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/nginx_status"
      - "{{BaseURL}}/nginx-status"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - 'Active connections:'

      - type: status
        status:
          - 200
# digest: 4a0a00473045022019b12f9bd86e639873eea1c7db39ca17fdbe841c98234903333e7e3e05d6e7ea022100a96a86508c64c98e4014e4aa5d4f97b4be8c6e3deb7e1600cc74a72a7acbe790:922c64590222798bb761d5b6d8e72950