nuclei-templates/http/miscellaneous/security-txt.yaml

id: security-txt

info:
  name: security.txt File
  author: bad5ect0r,noraj
  severity: info
  description: File similar to robots.txt but intended to be read by humans wishing to contact a website’s owner about security issues. Often defines a security policy and contact details.
  reference:
    - https://securitytxt.org/
    - https://community.turgensec.com/security-txt-progress-in-ethical-security-research/
  metadata:
    max-request: 2
    shodan-query: http.securitytxt:contact http.status:200
  tags: misc,generic

http:
  - method: GET
    path:
      - "{{RootURL}}/.well-known/security.txt"
      - "{{RootURL}}/security.txt"

    stop-at-first-match: true
    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "Contact:"
          - "Expires:"

      - type: dsl
        dsl:
          - "len(body) <= 4096 && len(body) > 0"

    extractors:
      - type: regex
        group: 1
        regex:
          - '(?mi)Contact:(.*)'
# digest: 490a0046304402204191256ec14c84d855e710c89cf93e8d4d14036471145f075d5670c07de11450022075a0d9c2197ca8bd6d62b524ed8c8a72ca2fc61d60fc8a3ef0b6e2bdda410549:922c64590222798bb761d5b6d8e72950
-												Detect security.txt file.

Detect if a site supports responsible disclosure with a security.txt file: https://securitytxt.org/
											
										
										
											2020-05-08 11:06:57 +00:00
+								id: security-txt
 								info:
-												Update security-txt.yaml (#8185)


											
										
										
											2023-09-13 11:24:26 +00:00
+								  name: security.txt File
 								  author: bad5ect0r,noraj
-												uniform severity update

											
										
										
											2020-08-03 21:52:00 +00:00
+								  severity: info
-												Update security-txt.yaml (#8185)


											
										
										
											2023-09-13 11:24:26 +00:00
+								  description: File similar to robots.txt but intended to be read by humans wishing to contact a website’s owner about security issues. Often defines a security policy and contact details.
 								  reference:
 								    - https://securitytxt.org/
 								    - https://community.turgensec.com/security-txt-progress-in-ethical-security-research/
-												Added max request counter of each template

											
										
										
											2023-04-28 08:11:21 +00:00
+								  metadata:
 								    max-request: 2
-												Update security-txt.yaml (#8185)


											
										
										
											2023-09-13 11:24:26 +00:00
+								    shodan-query: http.securitytxt:contact http.status:200
 								  tags: misc,generic
-												Detect security.txt file.

Detect if a site supports responsible disclosure with a security.txt file: https://securitytxt.org/
											
										
										
											2020-05-08 11:06:57 +00:00
-												Refactoring the directory structure based on protocols (#7137)

* moving http templates

* updated cves.json

* moved network CVEs

* updated scripts

* updated workflows

* updated requests to http

* replaced network to tcp

---------

Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
											
										
										
											2023-04-27 04:28:59 +00:00
+								http:
-												Detect security.txt file.

Detect if a site supports responsible disclosure with a security.txt file: https://securitytxt.org/
											
										
										
											2020-05-08 11:06:57 +00:00
+								  - method: GET
 								    path:
-												Miscellaneous template updates

											
										
										
											2022-01-28 10:24:49 +00:00
+								      - "{{RootURL}}/.well-known/security.txt"
 								      - "{{RootURL}}/security.txt"
 								    stop-at-first-match: true
-												Using "host-redirects" instead of "redirects" to avoid scanning 3rd party / out of scope hosts. (#5491)


											
										
										
											2022-10-07 21:27:25 +00:00
+								    host-redirects: true
-												Miscellaneous template updates

											
										
										
											2022-01-28 10:24:49 +00:00
+								    max-redirects: 2
-												templateman update

											
										
										
											2023-10-14 11:27:55 +00:00
-												Fixed default condition OR to AND in false-positives

											
										
										
											2020-07-08 11:38:57 +00:00
+								    matchers-condition: and
-												Detect security.txt file.

Detect if a site supports responsible disclosure with a security.txt file: https://securitytxt.org/
											
										
										
											2020-05-08 11:06:57 +00:00
+								    matchers:
-												Add more strict rules for security.txt

Previous one had a few false positives. This should narrow that down.
											
										
										
											2020-05-08 11:41:26 +00:00
+								      - type: status
 								        status:
 								          - 200
-												Miscellaneous template updates

											
										
										
											2022-01-28 10:24:49 +00:00
-												Detect security.txt file.

Detect if a site supports responsible disclosure with a security.txt file: https://securitytxt.org/
											
										
										
											2020-05-08 11:06:57 +00:00
+								      - type: word
 								        words:
 								          - "Contact:"
-												Additional matcher for security.txt

											
										
										
											2023-12-06 15:13:23 +00:00
+								          - "Expires:"
-												Miscellaneous template updates

											
										
										
											2022-01-28 10:24:49 +00:00
-												Add more strict rules for security.txt

Previous one had a few false positives. This should narrow that down.
											
										
										
											2020-05-08 11:41:26 +00:00
+								      - type: dsl
 								        dsl:
-												Increase expected security.txt content size limit. (#8778)


											
										
										
											2023-12-06 14:58:27 +00:00
+								          - "len(body) <= 4096 && len(body) > 0"
-												Miscellaneous template updates

											
										
										
											2022-01-28 10:24:49 +00:00
 								    extractors:
 								      - type: regex
 								        group: 1
 								        regex:
-												Update security-txt.yaml (#8185)


											
										
										
											2023-09-13 11:24:26 +00:00
+								          - '(?mi)Contact:(.*)'
-												Additional matcher for security.txt

											
										
										
											2023-12-06 15:13:23 +00:00
+								# digest: 490a0046304402204191256ec14c84d855e710c89cf93e8d4d14036471145f075d5670c07de11450022075a0d9c2197ca8bd6d62b524ed8c8a72ca2fc61d60fc8a3ef0b6e2bdda410549:922c64590222798bb761d5b6d8e72950