nuclei-templates/exposures/files/github-gemfile-files.yaml

31 lines
728 B
YAML
Raw Normal View History

2021-07-30 12:31:05 +00:00
id: github-gemfile-files
info:
name: Github Gemfiles
author: hahwul
severity: info
description: Find github page files(Gemfile / Gemfile.lock)
requests:
- method: GET
path:
- "{{BaseURL}}/Gemfile"
- "{{BaseURL}}/Gemfile.lock"
matchers-condition: or
matchers:
- type: dsl
dsl:
- 'contains(body, "https://rubygems.org")'
- 'contains(body, "source")'
- 'contains(body, "gem")'
- 'status_code == 200'
condition: and
- type: dsl
dsl:
- 'contains(body, "https://rubygems.org")'
- 'contains(body, "remote")'
- 'contains(body, "specs")'
- 'status_code == 200'
condition: and