2022-12-04 17:10:51 +00:00
|
|
|
id: ws-ftp-log
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: WS FTP File Disclosure
|
|
|
|
|
author: Hardik-Solanki
|
|
|
|
|
severity: low
|
|
|
|
|
metadata:
|
|
|
|
|
verified: true
|
|
|
|
|
google-query: intitle:"Index of" ws_ftp.log
|
2022-12-04 19:03:13 +00:00
|
|
|
tags: exposure,ftp,logs
|
2022-12-04 17:10:51 +00:00
|
|
|
|
|
|
|
|
requests:
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- '{{BaseURL}}/ws_ftp.log'
|
2022-12-04 17:13:39 +00:00
|
|
|
- '{{BaseURL}}/WS_FTP.LOG'
|
2022-12-04 17:10:51 +00:00
|
|
|
|
|
|
|
|
stop-at-first-match: true
|
|
|
|
|
matchers-condition: and
|
|
|
|
|
matchers:
|
2022-12-23 09:26:34 +00:00
|
|
|
- type: regex
|
|
|
|
|
regex:
|
|
|
|
|
- '\d{4}\.\d{2}\.\d{2} \d{2}:\d{2} [A-Z] C:\\'
|
|
|
|
|
- '\d{4}\.\d{2}\.\d{2} \d{2}:\d{2} [A-Z] D:\\'
|
2022-12-04 17:10:51 +00:00
|
|
|
condition: or
|
|
|
|
|
|
|
|
|
|
- type: status
|
|
|
|
|
status:
|
|
|
|
|
- 200
|
