daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/exposures/configs/laravel-env.yaml

48 lines
1.4 KiB
YAML
Raw Normal View History

adding status, and updated id-name
2020-05-24 02:44:48 +00:00
id: laravel-env
Create laravel-env.yaml
2020-05-23 18:09:25 +00:00
info:
Up severity on public .env file and add description and reference
2021-04-11 14:35:07 +00:00
name: Laravel .env file accessible
Merge branch 'master' into master
2021-08-09 10:39:41 +00:00
author: pxmme1337,dwisiswant0,geeknik,emenalf,adrianmf
Up severity on public .env file and add description and reference
2021-04-11 14:35:07 +00:00
severity: critical
description: Laravel uses the .env file to store sensitive information like database credentials and tokens. It should not be publicly accessible.
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
reference:
- https://laravel.com/docs/master/configuration#environment-configuration
Update laravel-env.yaml
2021-08-07 19:41:14 +00:00
tags: config,exposure,laravel
Create laravel-env.yaml
2020-05-23 18:09:25 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}/.env"
Update laravel-env.yaml
2022-03-10 10:19:55 +00:00
- "{{BaseURL}}/.env.dev"
Update laravel-env.yaml Add additional filenames commonly used here.
2020-11-21 20:15:29 +00:00
- "{{BaseURL}}/.env.dev.local"
- "{{BaseURL}}/.env.development.local"
Update laravel-env.yaml
2022-03-10 10:19:55 +00:00
- "{{BaseURL}}/.env.prod"
Update laravel-env.yaml Add additional filenames commonly used here.
2020-11-21 20:15:29 +00:00
- "{{BaseURL}}/.env.prod.local"
Update laravel-env.yaml
2022-03-10 09:55:06 +00:00
- "{{BaseURL}}/.env.production"
Update laravel-env.yaml Add additional filenames commonly used here.
2020-11-21 20:15:29 +00:00
- "{{BaseURL}}/.env.production.local"
Update laravel-env.yaml (#825)
2021-02-08 12:48:52 +00:00
- "{{BaseURL}}/.env.local"
- "{{BaseURL}}/.env.example"
- "{{BaseURL}}/.env.stage"
- "{{BaseURL}}/.env.live"
Update laravel-env.yaml added new path
2021-08-09 06:43:29 +00:00
- "{{BaseURL}}/.env.backup"
- "{{BaseURL}}/.env.save"
Update laravel-env.yaml
2021-08-07 19:41:14 +00:00
- "{{BaseURL}}/.env.old"
Update laravel-env.yaml
2022-03-10 10:19:55 +00:00
- "{{BaseURL}}/.env.www"
Update laravel-env.yaml
2021-08-07 19:41:14 +00:00
- "{{BaseURL}}/.env_1"
- "{{BaseURL}}/.env_sample"
Update laravel-env.yaml
2022-03-10 09:55:06 +00:00
- "{{BaseURL}}/.env.{{DN}}"
Update laravel-env.yaml
2022-03-10 10:19:55 +00:00
- "{{BaseURL}}/.env.{{SD}}"
Update laravel-env.yaml
2021-08-10 02:54:37 +00:00
- "{{BaseURL}}/api/.env"
Update laravel-env.yaml
2021-08-07 19:41:14 +00:00
adding status, and updated id-name
2020-05-24 02:44:48 +00:00
matchers-condition: and
Create laravel-env.yaml
2020-05-23 18:09:25 +00:00
matchers:
:hammer: Fix false-positives laravel-env
2020-07-08 20:54:41 +00:00
- type: regex
regex:
Update laravel-env.yaml added case insensitivity to the regex matcher
2021-10-08 16:30:44 +00:00
- "(?mi)^APP_(NAME|ENV|KEY|DEBUG|URL|PASSWORD)="
- "(?mi)^DB_(HOST|PASSWORD|DATABASE)="
Update laravel-env.yaml
2021-08-07 19:41:14 +00:00
condition: or
adding status, and updated id-name
2020-05-24 02:44:48 +00:00
- type: status
status:
Update laravel-env.yaml
2021-08-10 02:54:37 +00:00
- 200