nuclei-templates/miscellaneous/security-txt.yaml

id: security-txt

info:
  name: Security.txt File
  author: bad5ect0r
  severity: info
  description: The website defines a security policy.
  tags: misc,generic

requests:
  - method: GET
    path:
      - "{{RootURL}}/.well-known/security.txt"
      - "{{RootURL}}/security.txt"

    stop-at-first-match: true
    host-redirects: true
    max-redirects: 2
    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "Contact:"

      - type: dsl
        dsl:
          - "len(body) <= 1024 && len(body) > 0"

    extractors:
      - type: regex
        group: 1
        regex:
          - '(?mi)Contact:(.*)'
Detect security.txt file. Detect if a site supports responsible disclosure with a security.txt file: https://securitytxt.org/ 2020-05-08 11:06:57 +00:00			`id: security-txt`

			`info:`
			`name: Security.txt File`
			`author: bad5ect0r`
uniform severity update 2020-08-03 21:52:00 +00:00			`severity: info`
add few descriptions add few descriptions and references on /vulnerabilities/ templates. 2020-08-25 19:43:43 +00:00			`description: The website defines a security policy.`
Update security.txt.yaml 2021-08-11 08:01:02 +00:00			`tags: misc,generic`
Detect security.txt file. Detect if a site supports responsible disclosure with a security.txt file: https://securitytxt.org/ 2020-05-08 11:06:57 +00:00
			`requests:`
			`- method: GET`
			`path:`
Miscellaneous template updates 2022-01-28 10:24:49 +00:00			`- "{{RootURL}}/.well-known/security.txt"`
			`- "{{RootURL}}/security.txt"`

			`stop-at-first-match: true`
Using "host-redirects" instead of "redirects" to avoid scanning 3rd party / out of scope hosts. (#5491) 2022-10-07 21:27:25 +00:00			`host-redirects: true`
Miscellaneous template updates 2022-01-28 10:24:49 +00:00			`max-redirects: 2`
Fixed default condition OR to AND in false-positives 2020-07-08 11:38:57 +00:00			`matchers-condition: and`
Detect security.txt file. Detect if a site supports responsible disclosure with a security.txt file: https://securitytxt.org/ 2020-05-08 11:06:57 +00:00			`matchers:`
Add more strict rules for security.txt Previous one had a few false positives. This should narrow that down. 2020-05-08 11:41:26 +00:00			`- type: status`
			`status:`
			`- 200`
Miscellaneous template updates 2022-01-28 10:24:49 +00:00
Detect security.txt file. Detect if a site supports responsible disclosure with a security.txt file: https://securitytxt.org/ 2020-05-08 11:06:57 +00:00			`- type: word`
			`words:`
			`- "Contact:"`
Miscellaneous template updates 2022-01-28 10:24:49 +00:00
Add more strict rules for security.txt Previous one had a few false positives. This should narrow that down. 2020-05-08 11:41:26 +00:00			`- type: dsl`
			`dsl:`
Update syntax 2020-05-25 08:02:27 +00:00			`- "len(body) <= 1024 && len(body) > 0"`
Miscellaneous template updates 2022-01-28 10:24:49 +00:00
			`extractors:`
			`- type: regex`
			`group: 1`
			`regex:`
			`- '(?mi)Contact:(.*)'`