v9.8.5

projectdiscovery/nuclei-templatesv9.8.5Apr 22, 2024by princechaddha

AI Summary

Introduces AWS Cloud Configuration Review templates, allowing users to scan AWS misconfigurations using the `code` protocol. Also adds various AWS EC2, S3, IAM, RDS, and CloudTrail templates.

Key Highlights

  • Introduced AWS Cloud Configuration Review templates with profile support
  • Added EC2 unrestricted port checks (HTTP, SSH, RDP, etc.)
  • Added S3 bucket misconfigurations (public access, encryption, versioning)
  • Added IAM policy checks (root MFA, password policy, key rotation)
  • Added CloudTrail logging and integrity checks

New Features

  • 142 New Templates Added
  • 10 CVEs Added
  • 6 First-time contributions
  • Includes usage instructions for cloud configuration scanning

Full Release Notes

### 🔥 Release Highlights 🔥

We're excited to share about Nuclei-Templates v9.8.5! This new version includes newly added AWS cloud config review templates.
These templates can be used by companies or pentesters for identifying misconfigurations in the AWS cloud environment. 

Similarly by leveraging aws code templates, security teams will be able to write their own checks for identifying misconfigurations that are specific to their particular workflows. This will enable them to effectively identify and remediate potential security issues within AWS environments.

To use cloud configuration review templates, first we need set up the environment. This setup is similar to using the `aws-cli`, where you either add `aws_access_key_id` and `aws_secret_access_key` to the `~/.aws/credentials` file or export them as environment variables.

```yaml
nuclei -id aws-code-env -code
```

We've also introduced the concept of profiles, which allow users to run a specific set of templates tailored for a particular use case. For running AWS templates, we have a profile named `aws-cloud-config`.

Now you're all set to run the templates!

```yaml
nuclei -config ~/nuclei-templates/profiles/aws-cloud-config.yml -cloud-upload
```

### What's Changed
#### New Templates Added: `142` | CVEs Added: `10` | First-time contributions: `6`

- http/cves/2024/CVE-2024-26331.yaml by @carsonchan12345 🔥
- http/cves/2024/CVE-2024-3400.yaml by @salts,@parthmalhotra 🔥
- http/cves/2024/CVE-2024-3273.yaml by @pussycat0x 🔥
- code/cves/2024/CVE-2024-3094.yaml by @pdteam 🔥
- http/cves/2024/CVE-2024-2879.yaml by @d4ly 🔥
- http/cves/2024/CVE-2024-2389.yaml by @pdresearch,@parthmalhotra 🔥
- http/cves/2024/CVE-2024-0337.yaml by @Kazgangap
- javascript/cves/2023/CVE-2023-48795.yaml by @pussycat0x
- http/cves/2022/CVE-2022-24627.yaml by @geeknik
- http/cves/2022/CVE-2022-0424.yaml by @Kazgangap
- http/vulnerabilities/other/opencart-core-sqli.yaml by @Kazgangap
- http/vulnerabilities/other/quick-cms-sqli.yaml by @Kazgangap
- http/vulnerabilities/other/user-management-system-sqli.yaml by @f0xy
- cloud/aws/acm/acm-cert-expired.yaml by @princechaddha
- cloud/aws/acm/acm-cert-renewal-30days.yaml by @princechaddha
- cloud/aws/acm/acm-cert-renewal-45days.yaml by @princechaddha
- cloud/aws/acm/acm-cert-validation.yaml by @princechaddha
- cloud/aws/acm/acm-wildcard-cert.yaml by @princechaddha
- cloud/aws/aws-code-env.yaml by @princechaddha
- cloud/aws/cloudtrail/cloudtrail-data-events.yaml by @princechaddha
- cloud/aws/cloudtrail/cloudtrail-disabled.yaml by @princechaddha
- cloud/aws/cloudtrail/cloudtrail-dup-logs.yaml by @princechaddha
- cloud/aws/cloudtrail/cloudtrail-global-disabled.yaml by @princechaddha
- cloud/aws/cloudtrail/cloudtrail-integrated-cloudwatch.yaml by @princechaddha
- cloud/aws/cloudtrail/cloudtrail-log-integrity.yaml by @princechaddha
- cloud/aws/cloudtrail/cloudtrail-logs-not-encrypted.yaml by @princechaddha
- cloud/aws/cloudtrail/cloudtrail-mfa-delete.yaml by @princechaddha
- cloud/aws/cloudtrail/cloudtrail-mgmt-events.yaml by @princechaddha
- cloud/aws/cloudtrail/cloudtrail-public-buckets.yaml by @princechaddha
- cloud/aws/cloudtrail/cloudtrail-s3-bucket-logging.yaml by @princechaddha
- cloud/aws/cloudtrail/s3-object-lock-not-enabled.yaml by @princechaddha
- cloud/aws/cloudwatch/cw-alarm-action-set.yaml by @princechaddha
- cloud/aws/cloudwatch/cw-alarms-actions.yaml by @princechaddha
- cloud/aws/ec2/ec2-imdsv2.yaml by @princechaddha
- cloud/aws/ec2/ec2-public-ip.yaml by @princechaddha
- cloud/aws/ec2/ec2-sg-egress-open.yaml by @princechaddha
- cloud/aws/ec2/ec2-sg-ingress.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-cifs.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-dns.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-ftp.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-http.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-https.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-icmp.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-memcached.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-mongodb.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-mssql.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-mysql.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-netbios.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-opensearch.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-oracle.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-pgsql.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-rdp.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-redis.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-smtp.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-ssh.yaml by @princechaddha
- cloud/aws/ec2/ec2-unrestricted-telnet.yaml by @princechaddha
- cloud/aws/ec2/publicly-shared-ami.yaml by @princechaddha
- cloud/aws/ec2/unencrypted-aws-ami.yaml by @princechaddha
- cloud/aws/iam/iam-access-analyzer.yaml by @princechaddha
- cloud/aws/iam/iam-expired-ssl.yaml by @princechaddha
- cloud/aws/iam/iam-full-admin-privileges.yaml by @princechaddha
- cloud/aws/iam/iam-key-rotation-90days.yaml by @princechaddha
- cloud/aws/iam/iam-mfa-enable.yaml by @princechaddha
- cloud/aws/iam/iam-password-policy.yaml by @princechaddha
- cloud/aws/iam/iam-root-mfa.yaml by @princechaddha
- cloud/aws/iam/iam-ssh-keys-rotation.yaml by @princechaddha
- cloud/aws/iam/iam-unapproved-policy.yaml by @princechaddha
- cloud/aws/iam/iam-user-password-change.yaml by @princechaddha
- cloud/aws/iam/ssl-cert-renewal.yaml by @princechaddha
- cloud/aws/rds/aurora-copy-tags-snap.yaml by @princechaddha
- cloud/aws/rds/aurora-delete-protect.yaml by @princechaddha
- cloud/aws/rds/iam-db-auth.yaml by @princechaddha
- cloud/aws/rds/rds-backup-enable.yaml by @princechaddha
- cloud/aws/rds/rds-deletion-protection.yaml by @princechaddha
- cloud/aws/rds/rds-encryption-check.yaml by @princechaddha
- cloud/aws/rds/rds-event-notify.yaml by @princechaddha
- cloud/aws/rds/rds-event-sub-enable.yaml by @princechaddha
- cloud/aws/rds/rds-event-sub.yaml by @princechaddha
- cloud/aws/rds/rds-gp-ssd-usage.yaml by @princechaddha
- cloud/aws/rds/rds-public-snapshot.yaml by @princechaddha
- cloud/aws/rds/rds-public-subnet.yaml by @princechaddha
- cloud/aws/rds/rds-ri-payment-fail.yaml by @princechaddha
- cloud/aws/rds/rds-snapshot-encryption.yaml by @princechaddha
- cloud/aws/s3/s3-access-logging.yaml by @princechaddha
- cloud/aws/s3/s3-auth-fullcontrol.yaml by @princechaddha
- cloud/aws/s3/s3-bucket-key.yaml by @princechaddha
- cloud/aws/s3/s3-bucket-policy-public-access.yaml by @princechaddha
- cloud/aws/s3/s3-mfa-delete-check.yaml by @princechaddha
- cloud/aws/s3/s3-public-read-acp.yaml by @princechaddha
- cloud/aws/s3/s3-public-read.yaml by @princechaddha
- cloud/aws/s3/s3-public-write-acp.yaml by @princechaddha
- cloud/aws/s3/s3-public-write.yaml by @princechaddha
- cloud/aws/s3/s3-server-side-encryption.yaml by @princechaddha
- cloud/aws/s3/s3-versioning.yaml by @princechaddha
- cloud/aws/vpc/nacl-open-inbound.yaml by @princechaddha
- cloud/aws/vpc/nacl-outbound-restrict.yaml by @princechaddha
- cloud/aws/vpc/nat-gateway-usage.yaml by @princechaddha
- cloud/aws/vpc/unrestricted-admin-ports.yaml by @princechaddha
- cloud/aws/vpc/vpc-endpoint-exposed.yaml by @princechaddha
- cloud/aws/vpc/vpc-endpoints-not-deployed.yaml by @princechaddha
- cloud/aws/vpc/vpc-flowlogs-not-enabled.yaml by @princechaddha
- cloud/aws/vpc/vpn-tunnel-down.yaml by @princechaddha
- http/misconfiguration/apple-cups-exposure.yaml by @DhiyaneshDK
- http/misconfiguration/dlink-unauth-cgi-script.yaml by @pussycat0x
- http/misconfiguration/helm-dashboard-exposure.yaml by @DhiyaneshDk
- http/misconfiguration/installer/phpipam-installer.yaml by @DhiyaneshDK
- http/misconfiguration/intelbras-dvr-unauth.yaml by @pussycat0x
- http/misconfiguration/sentinel-license-monitor.yaml by @DhiyaneshDk
- http/misconfiguration/thanos-prometheus-exposure.yaml by @DhiyaneshDk
- http/default-logins/allnet/allnet-default-login.yaml by @ritikchaddha
- http/default-logins/asus/asus-rtn16-default-login.yaml by @ritikchaddha
- http/default-logins/asus/asus-wl500g-default-login.yaml by @ritikchaddha
- http/default-logins/asus/asus-wl520GU-default-login.yaml by @ritikchaddha
- http/default-logins/barco-clickshare-default-login.yaml by @ritikchaddha
- http/exposed-panels/akhq-panel.yaml by @DhiyaneshDK
- http/exposed-panels/algonomia-panel.yaml by @righettod
- http/exposed-panels/beyondtrust-priv-panel.yaml by @righettod
- http/exposed-panels/chemotargets-clarityvista-panel.yaml by @righettod
- http/exposed-panels/mitel-micollab-panel.yaml by @righettod
- http/exposed-panels/mitric-checker-panel.yaml by @righettod
- http/exposed-panels/ni-web-based-panel.yaml by @DhiyaneshDK
- http/exposed-panels/ollama-llm-panel.yaml by @pbuff07
- http/exposed-panels/outsystems-servicecenter-panel.yaml by @righettod
- http/exposed-panels/powerchute-network-panel.yaml by @DhiyaneshDK
- http/exposed-panels/rtm-web-panel.yaml by @DhiyaneshDK
- http/exposed-panels/suprema-biostar-panel.yaml by @ritikchaddha
- http/exposed-panels/tibco-spotfire-panel.yaml by @righettod
- http/exposed-panels/uipath-orchestrator-panel.yaml by @righettod
- http/exposed-panels/urbackup-panel.yaml by @DhiyaneshDk
- http/exposed-panels/zenml-dashboard-panel.yaml by @DhiyaneshDK
- http/exposures/apis/aspnet-soap-webservices-asmx.yaml by @righettod
- http/exposures/apis/redfish-api.yaml by @righettod
- http/exposures/files/ht-deployment.yaml by @Michal-Mikolas
- http/takeovers/gohire-takeover.yaml by @philippedelteil
- http/takeovers/helpdocs-takeover.yaml by @philippedelteil
- http/takeovers/softr-takeover.yaml by @philippedelteil
- http/takeovers/uptime-takeover.yaml by @philippedelteil
- http/technologies/citrix-xenmobile-version.yaml by @Puben
- http/technologies/splunkhec-detect.yaml by @idealphase
- http/technologies/tibco-spotfire-services-detect.yaml by @righettod
- ssl/c2/sliver-c2.yaml by @johnk3r
- dns/bimi-detect.yaml by @rxerium

## New Contributors
* @d4lyw made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9512
* @Puben made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9530
* @carsonchan12345 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9566
* @0xKayala made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9573
* @scottdharvey made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9585
* @Eyub-kurnaz made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9450

**Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.8.1...v9.8.5