daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/exposures/configs/symfony-security-config.yaml

38 lines
1.1 KiB
YAML
Raw Normal View History

Add Symfony Security Config Expose Template Symfony security contain information about used encryption algorithms and list which routes are protected
2021-10-21 08:14:04 +00:00
id: symfony-security-config
info:
Enhancement: exposures/configs/symfony-security-config.yaml by md
2023-02-23 21:32:21 +00:00
name: Symfony Security Configuration File - Detect
Add Symfony Security Config Expose Template Symfony security contain information about used encryption algorithms and list which routes are protected
2021-10-21 08:14:04 +00:00
author: dahse89
severity: info
Enhancement: exposures/configs/symfony-security-config.yaml by md
2023-02-23 21:32:21 +00:00
description: Symfony security configuration file was detected.
Add Symfony Security Config Expose Template Symfony security contain information about used encryption algorithms and list which routes are protected
2021-10-21 08:14:04 +00:00
reference:
- https://symfony2-document.readthedocs.io/en/latest/book/security.html
- https://symfony.com/doc/current/reference/configuration/security.html
Enhancement: exposures/configs/symfony-security-config.yaml by md
2023-02-23 21:32:21 +00:00
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
templateman update
2023-10-14 11:27:55 +00:00
cvss-score: 0
Enhancement: exposures/configs/symfony-security-config.yaml by md
2023-02-23 21:32:21 +00:00
cwe-id: CWE-200
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 2
templateman update
2023-10-14 11:27:55 +00:00
tags: config,exposure,symfony
Add Symfony Security Config Expose Template Symfony security contain information about used encryption algorithms and list which routes are protected
2021-10-21 08:14:04 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Add Symfony Security Config Expose Template Symfony security contain information about used encryption algorithms and list which routes are protected
2021-10-21 08:14:04 +00:00
- method: GET
path:
- "{{BaseURL}}/config/packages/security.yaml"
- "{{BaseURL}}/app/config/security.yml"
Update symfony-security-config.yaml
2021-10-21 13:49:21 +00:00
Add Symfony Security Config Expose Template Symfony security contain information about used encryption algorithms and list which routes are protected
2021-10-21 08:14:04 +00:00
matchers-condition: and
matchers:
- type: status
status:
- 200
Update symfony-security-config.yaml
2021-10-21 13:49:21 +00:00
Add Symfony Security Config Expose Template Symfony security contain information about used encryption algorithms and list which routes are protected
2021-10-21 08:14:04 +00:00
- type: word
words:
- "security:"
Update symfony-security-config.yaml
2021-10-21 13:49:21 +00:00
- "firewalls:"
- "access_control:"
Add Symfony Security Config Expose Template Symfony security contain information about used encryption algorithms and list which routes are protected
2021-10-21 08:14:04 +00:00
condition: and
part: body
Auto Template Signing [Thu Oct 19 13:13:50 UTC 2023] :robot:
2023-10-19 13:13:52 +00:00
# digest: 4a0a0047304502210091071ec153f9dd960795f9420467a6ca26ebc243adf0eaed3d63fe7879501e7102207dd4dfd1d9e1b99d744838246934a0ed81b70d437dbf7b99ec434ec5640f590c:922c64590222798bb761d5b6d8e72950