id: hp-device-info-detect

info:
  name: HP Device Info Detection
  author: pussycat0x
  severity: low
  description: Internal info is disclosed to external users in HP Device.
  reference: https://www.exploit-db.com/ghdb/6905
  metadata:
    max-request: 1
  tags: iot,hp

http:
  - method: GET
    path:
      - "{{BaseURL}}/hp/device/DeviceInformation/View"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "Device Information"
          - "hp"
        condition: and

      - type: status
        status:
          - 200
# digest: 4a0a00473045022012402b9ab1dd31636daf003364b25a41bf290b392f808daca9296a3ebce3315a022100e3cd26c238f22d13a0cec9b5ed88943baabc4ab69bd9723072f940b628ee566a:922c64590222798bb761d5b6d8e72950