Starstruk Logo MarkStarstruk

v9.7.0

projectdiscovery/nuclei-templatesv9.7.0Dec 1, 2023by princechaddha

AI Summary

Adds 51 templates and 18 CVEs, introducing SSH enumeration via JS protocol and templates to detect exposed configuration files.

Key Highlights

  • Added SSH enumeration templates via JS protocol.
  • Added file exposure templates for various config files.
  • Added 7 first-time contributors.
  • Added 18 new CVEs.

New Features

  • SSH enumeration templates (obsolete version, weak algorithms).
  • File exposure templates (auth-json, azuredeploy-json, etc.).
  • 18 new CVE templates.
  • Technology detection templates.

Full Release Notes

🔥 Release Highlights 🔥

- code/cves/2023/CVE-2023-2640.yaml by @princechaddha 🔥
- http/cves/2023/CVE-2023-49103.yaml by @ritikchaddha 🔥
- http/cves/2023/CVE-2023-47246.yaml by @iamnoooob,@rootxharsh,@pdresearch 🔥
- http/cves/2021/CVE-2021-45382.yaml by @king-alexander 🔥
- http/cves/2021/CVE-2021-35395.yaml by @king-alexander 🔥
- http/cves/2021/CVE-2021-33690.yaml by DhiyaneshDK 🔥
- http/cves/2021/CVE-2021-26294.yaml by @johnk3r 🔥

## What's Changed

#### New Templates Added: `51` | CVEs Added: `18` | First-time contributions: `7`

- code/cves/2023/CVE-2023-2640.yaml by @princechaddha 🔥
- http/cves/2023/CVE-2023-49103.yaml by @ritikchaddha 🔥
- http/cves/2023/CVE-2023-47246.yaml by @iamnoooob,@rootxharsh,@pdresearch 🔥
- http/cves/2023/CVE-2023-45542.yaml by @r3Y3r53
- http/cves/2023/CVE-2023-43326.yaml by @r3Y3r53
- http/cves/2023/CVE-2023-43325.yaml by @r3Y3r53
- http/cves/2023/CVE-2023-39796.yaml by @youngpope
- http/cves/2023/CVE-2023-30258.yaml by @gy741
- http/cves/2023/CVE-2023-26347.yaml by @salts
- http/cves/2023/CVE-2023-5375.yaml by @shankaracharya
- http/cves/2022/CVE-2022-1170.yaml by @Akincibor,@ritikchaddha
- http/cves/2021/CVE-2021-45382.yaml by @king-alexander 🔥
- http/cves/2021/CVE-2021-35395.yaml by @king-alexander 🔥
- http/cves/2021/CVE-2021-33690.yaml by DhiyaneshDK 🔥
- http/cves/2021/CVE-2021-26294.yaml by @johnk3r 🔥
- http/cves/2021/CVE-2021-26292.yaml by @johnk3r
- http/cves/2017/CVE-2017-7855.yaml by @r3Y3r53
- javascript/cves/2016/CVE-2016-8706.yaml by @pussycat0x
- http/vulnerabilities/other/xxljob-executor-unauth.yaml by @k3rwin
- http/default-logins/structurizr/structurizr-default-login.yaml by DhiyaneshDK
- http/exposed-panels/adhoc-transfer-panel.yaml by @johnk3r
- http/exposures/configs/jsconfig-json.yaml by DhiyaneshDk
- http/exposures/configs/phinx-config.yaml by DhiyaneshDk
- http/exposures/configs/vite-config.yaml by DhiyaneshDk
- http/exposures/files/apdisk-disclosure.yaml by DhiyaneshDk
- http/exposures/files/auth-json.yaml by DhiyaneshDk
- http/exposures/files/azuredeploy-json.yaml by DhiyaneshDk
- http/exposures/files/php-cs-cache.yaml by DhiyaneshDk
- http/exposed-panels/afterlogic-webmail-login.yaml by @johnk3r
- http/exposed-panels/structurizr-panel.yaml by DhiyaneshDk
- http/misconfiguration/installer/mosparo-install.yaml by DhiyaneshDK
- http/misconfiguration/ms-exchange-user-enum.yaml by @righettod
- http/misconfiguration/node-express-status.yaml by DhiyaneshDk
- http/misconfiguration/tomcat-stacktraces.yaml by @lucky0x0d
- http/takeovers/clever-takeover.yaml by @supr4s
- javascript/enumeration/obsolete-ssh-version.yaml by @pussycat0x
- javascript/enumeration/ssh-cbc-mode-ciphers.yaml by @pussycat0x
- javascript/enumeration/ssh-diffie-hellman-logjam.yaml by @pussycat0x
- javascript/enumeration/ssh-sha1-hmac-algo.yaml by @pussycat0x
- javascript/enumeration/ssh-weak-algo-supported.yaml by @pussycat0x
- javascript/enumeration/ssh-weak-mac-algo.yaml by @pussycat0x
- javascript/enumeration/ssh-weak-public-key.yaml by @pussycat0x
- javascript/enumeration/ssh-weakkey-exchange-algo.yaml by @pussycat0x
- network/detection/aws-sftp-detect.yaml by @johnk3r
- network/detection/moveit-sftp-detect.yaml by @johnk3r
- file/keys/kubernetes/kubernetes-dockercfg-secret.yaml by @dwisiswant0
- file/keys/kubernetes/kubernetes-dockerconfigjson-secret.yaml by @dwisiswant0
- http/technologies/4D-detect.yaml by @righettod
- http/technologies/aws/aws-detect.yaml by @6mile
- http/technologies/silverback-detect.yaml by @nodauf
- http/technologies/wordpress/plugins/templately.yaml by @ricardomaia

## New Contributors
* @fullstackpotato made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8599
* @wahyuhadi made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8597
* @l0pens made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8618
* @rtvkiz made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8645
* @joelczk made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8644
* @Mr-B0hl00l made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8648
* @Jaclyn6 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8675

**Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.6.9...v9.7.0