nuclei-templates/exposures/configs/git-config.yaml

30 lines
590 B
YAML
Raw Normal View History

2021-07-07 15:21:33 +00:00
id: git-config
info:
name: Git Config Disclosure
author: pdteam,pikpikcu,Mah3Sec_
severity: medium
description: Searches for the pattern /.git/config and log file on passed URLs.
tags: config,git,exposure
requests:
- method: GET
path:
- "{{BaseURL}}/.git/config"
2021-07-07 15:21:33 +00:00
matchers-condition: and
matchers:
- type: word
words:
- "[core]"
- type: dsl
dsl:
- "!contains(tolower(body), '<html')"
- "!contains(tolower(body), '<body')"
condition: and
- type: status
status:
- 200