Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Refactor the "Strapi" template. #10887

Merged
merged 2 commits into from
Oct 7, 2024

Conversation

righettod
Copy link
Contributor

Template / PR Information

Hi,

This PR propose a little refactoring of the template to make it more generic to detect the presence of an instance of the Strapi login panel software.

Template Validation

I've validated this template locally?

  • YES
  • NO

Tested against the following hosts found via shodan:

https://3.124.117.57
https://159.65.58.157
https://38.242.253.82
https://3.79.162.183
https://206.189.52.140
https://51.158.110.104
http://52.210.199.112
https://3.227.115.180
https://18.211.133.180
https://35.153.244.97
https://44.211.47.231
https://13.235.180.116
https://96.126.125.166
https://45.32.129.169
https://3.140.139.26
https://148.135.82.185
https://162.214.125.106
http://44.233.157.85
https://18.181.26.57

image

Additional Details (leave it blank if not applicable)

Shodan query used: https://www.shodan.io/search?query=http.title%3A%22strapi%22

image

Additional References:

None

@GeorginaReeder
Copy link

Thanks as always for your contribution @righettod ! :)

@DhiyaneshGeek DhiyaneshGeek self-assigned this Oct 3, 2024
@DhiyaneshGeek
Copy link
Member

Hi @righettod

Thank you for your contribution to the template! I noticed that the template includes endpoints like the "forgot-password" and "register" pages. While these are useful, including them might increase the number of requests and create extra noise. To keep the requests efficient and focused, I’ve removed those additional endpoints.

Please feel free to review the changes and let me know your thoughts. I appreciate your efforts and look forward to your feedback!

Thanks

@righettod
Copy link
Contributor Author

righettod commented Oct 3, 2024

Hi @DhiyaneshGeek

Thanks a lot for the advices and the fix, it is ok for me 💯

I will apply it in all my future contribution 👍

@DhiyaneshGeek DhiyaneshGeek added Done Ready to merge and removed waiting for more info labels Oct 5, 2024
@ritikchaddha ritikchaddha merged commit 3d87a25 into projectdiscovery:main Oct 7, 2024
3 checks passed
@righettod righettod deleted the strapi_upd branch October 20, 2024 07:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Done Ready to merge Hacktoberfest
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants