Exposed Ingress NGINX Admission Controller Nuclei Template

id: exposed-ingress-nginx-admission

info:
  name: Publicly exposed Ingress NGINX Admission
  author: Wiz research
  severity: high
  description: Ingress Nginx admission controller endpoint should not be exposed
  metadata:
    max-request: 1
  tags: ssl,tls

ssl:
  - address: "{{Host}}:{{Port}}"

    matchers:
      - type: dsl
        dsl:
          - 'contains(issuer_org, "nil1")'
          - 'contains(subject_org, "nil2")'
          - 'contains(subject_an, "nginx")'
        condition: and

    extractors:
      - type: json
        name: issuer_org
        json:
            - ".issuer_org[0]"
          
      - type: json
        name: subject_org
        json:
            - ".subject_org[0]"
     
      - type: json
        name: subject_an
        json:
            - ".subject_an[0]" 

Hello @atoolchain, you can use these debug command with nuclei :

-debug show all requests and responses
-dreq, -debug-req show all sent requests
-dresp, -debug-resp show all received responses

I think it can help you to identify a problem or not.

Oh and i see that you don't specify a port. You can modify the {{Port}} variable and define 80 or 443 for example.

Hi @atoolchain for me its also coming same like urs , can u plz tell how u veried

Thanks for the template