daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/exposures/configs/github-workflows-disclosure...

59 lines
2.2 KiB
YAML
Raw Normal View History

Create github-workflows-disclosure.yaml
2021-07-21 07:51:05 +00:00
id: github-workflows-disclosure
info:
name: Github Workflow Disclosure
Update github-workflows-disclosure.yaml
2021-10-07 21:51:45 +00:00
author: dhiyaneshDk,geeknik
Create github-workflows-disclosure.yaml
2021-07-21 07:51:05 +00:00
severity: medium
Description Added
2023-12-22 09:44:59 +00:00
description: Github Workflow was exposed.
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
reference:
- https://github.com/detectify/ugly-duckling/blob/master/modules/crowdsourced/github-workflows-disclosure.json
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 27
templateman update
2023-10-14 11:27:55 +00:00
tags: exposure,config
Create github-workflows-disclosure.yaml
2021-07-21 07:51:05 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Create github-workflows-disclosure.yaml
2021-07-21 07:51:05 +00:00
- method: GET
path:
- "{{BaseURL}}/.github/workflows/ci.yml"
- "{{BaseURL}}/.github/workflows/ci.yaml"
- "{{BaseURL}}/.github/workflows/CI.yml"
- "{{BaseURL}}/.github/workflows/main.yml"
- "{{BaseURL}}/.github/workflows/main.yaml"
- "{{BaseURL}}/.github/workflows/build.yml"
- "{{BaseURL}}/.github/workflows/build.yaml"
- "{{BaseURL}}/.github/workflows/test.yml"
- "{{BaseURL}}/.github/workflows/test.yaml"
- "{{BaseURL}}/.github/workflows/tests.yml"
- "{{BaseURL}}/.github/workflows/tests.yaml"
- "{{BaseURL}}/.github/workflows/release.yml"
- "{{BaseURL}}/.github/workflows/publish.yml"
- "{{BaseURL}}/.github/workflows/deploy.yml"
- "{{BaseURL}}/.github/workflows/push.yml"
- "{{BaseURL}}/.github/workflows/lint.yml"
- "{{BaseURL}}/.github/workflows/coverage.yml"
- "{{BaseURL}}/.github/workflows/release.yaml"
- "{{BaseURL}}/.github/workflows/pr.yml"
- "{{BaseURL}}/.github/workflows/automerge.yml"
- "{{BaseURL}}/.github/workflows/docker.yml"
Update github-workflows-disclosure.yaml Add new paths
2021-10-07 21:50:57 +00:00
- "{{BaseURL}}/.github/workflows/ci-generated.yml"
- "{{BaseURL}}/.github/workflows/ci-push.yml"
- "{{BaseURL}}/.github/workflows/ci-daily.yml"
- "{{BaseURL}}/.github/workflows/ci-issues.yml"
- "{{BaseURL}}/.github/workflows/smoosh-status.yml"
Update github-workflows-disclosure.yaml Might expose a SNYK_TOKEN
2021-10-20 18:44:17 +00:00
- "{{BaseURL}}/.github/workflows/snyk.yml"
Update exposures/configs/github-workflows-disclosure.yaml Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 12:24:27 +00:00
Create github-workflows-disclosure.yaml
2021-07-21 07:51:05 +00:00
matchers-condition: and
matchers:
- type: regex
regex:
- "(?m)^\\s*\"?on\"?:"
- "(?m)^\\s*\"?jobs\"?:"
- "(?m)^\\s*\"?steps\"?:"
- "(?m)^\\s*- \"?uses\"?:"
part: body
Update exposures/configs/github-workflows-disclosure.yaml Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 18:46:13 +00:00
condition: and
Create github-workflows-disclosure.yaml
2021-07-21 07:51:05 +00:00
- type: status
status:
- 200
Auto Template Signing [Fri Dec 29 09:57:30 UTC 2023] :robot:
2023-12-29 09:57:30 +00:00
# digest: 4b0a00483046022100e56df88054a45c73d5b15d61d3086ab4ed3f3fa0de22d3b48a35082287261a96022100d409551a0f0bfb018fdefc89d3eacbdd87f2ccfe512ba252435d994fcb48ff7b:922c64590222798bb761d5b6d8e72950