Add 7 misconfiguration templates: blockchain RPC, Node-RED, H2 Console, Argo Workflows, Graylog, Checkmk

[0xBassia]

Summary

7 new misconfiguration detection templates for services not currently covered.

New Templates

Template	Severity	Description
blockchain-rpc-txpool-exposed	high	Detects blockchain RPC endpoints exposing txpool_content (enables MEV/frontrunning attacks)
blockchain-rpc-debug-trace	medium	Detects debug_traceTransaction enabled on public blockchain RPCs
node-red-unauth	high	Detects Node-RED flow editor accessible without authentication (RCE via exec node)
h2-console-exposed	critical	Detects H2 Database web console exposed (common in Spring Boot apps, can lead to RCE)
argo-workflows-unauth	high	Detects Argo Workflows dashboard without authentication (K8s workflow submission)
graylog-default-credentials	high	Detects Graylog with default admin/admin credentials
checkmk-default-credentials	high	Detects Checkmk with default cmkadmin/cmkadmin credentials

Notes

• The blockchain RPC templates are the first of their kind in nuclei-templates — no existing templates cover JSON-RPC debug/txpool method exposure
• All templates use multiple matchers to minimize false positives
• Each template includes proper CVSS scoring, CWE classification, description, impact, and remediation
• References to official documentation included for all templates
• The blockchain templates were developed from real findings during authorized bug bounty testing

[neo-by-projectdiscovery-dev]

Neo - Nuclei Template Review — In Progress

_{Comment @pdneo help for available commands. · Open in Neo}

[neo-by-projectdiscovery-dev]

Neo - Nuclei Template Review

No security issues found

Hardening Notes

• The previous medium severity matcher logic issue in blockchain-rpc-debug-exposure.yaml (negative matcher can cause false negatives when error messages contain phrases like 'not found') is still present and should be addressed before merge
• Consider testing blockchain-rpc-debug-exposure.yaml against various Ethereum client implementations (Geth, Erigon, Nethermind) to validate the matcher logic handles all error message variations correctly

_{Comment @pdneo help for available commands. · Open in Neo}