nuclei-templates/files/package-json.yaml

30 lines
652 B
YAML
Raw Normal View History

id: package-json
info:
name: npm package.json disclosure
2021-01-07 18:56:47 +00:00
author: geeknik & afaq
severity: info
description: All npm packages contain a file, usually in the project root, called package.json - this file holds various metadata relevant to the project.
requests:
- method: GET
path:
- "{{BaseURL}}/package.json"
2021-01-07 18:56:47 +00:00
- "{{BaseURL}}/package-lock.json"
matchers-condition: and
matchers:
- type: word
words:
- "name"
- "version"
condition: and
- type: word
words:
- "application/json"
part: header
- type: status
status:
2021-01-03 06:38:37 +00:00
- 200