nuclei-templates/http/exposures/files/symfony-security.yaml

id: symfony-security

info:
  name: Symfony security.yml File Disclosure
  author: DhiyaneshDK
  severity: info
  metadata:
    verified: true
    max-request: 3
    google-query: intitle:"index of" "security.yml"
  tags: symfony,devops,exposure,files

http:
  - method: GET
    path:
      - "{{BaseURL}}/security.yml"
      - "{{BaseURL}}/config/security.yml"
      - "{{BaseURL}}/app/config/security.yml"

    stop-at-first-match: true

    matchers-condition: and
    matchers:
      - type: word
        words:
          - 'security:'
          - 'providers:'
        condition: and

      - type: status
        status:
          - 200

# digest: 490a0046304402206b983d3e4e1ef38d3b4cae7cb19f910b490bd9d810342b577fd73e30f95ce72802206402029e10542ce58e676260699f3ec277efb05242fa7682891cd42ab28e0d40:922c64590222798bb761d5b6d8e72950
Create symfony-security.yaml 2022-07-04 20:56:43 +00:00			`id: symfony-security`

			`info:`
			`name: Symfony security.yml File Disclosure`
			`author: DhiyaneshDK`
Update symfony-security.yaml 2022-07-05 03:29:59 +00:00			`severity: info`
Create symfony-security.yaml 2022-07-04 20:56:43 +00:00			`metadata:`
Update symfony-security.yaml 2022-07-05 03:29:59 +00:00			`verified: true`
templateman update 2023-10-14 11:27:55 +00:00			`max-request: 3`
Replace google-dork with google-query in all templates (#5328) * dos2unix to standardize line endings * Replace google-dork with google-query 2022-09-08 22:39:14 +00:00			`google-query: intitle:"index of" "security.yml"`
update tags 2022-10-13 10:12:07 +00:00			`tags: symfony,devops,exposure,files`
Create symfony-security.yaml 2022-07-04 20:56:43 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Create symfony-security.yaml 2022-07-04 20:56:43 +00:00			`- method: GET`
			`path:`
			`- "{{BaseURL}}/security.yml"`
Update symfony-security.yaml 2022-07-04 20:58:52 +00:00			`- "{{BaseURL}}/config/security.yml"`
Create symfony-security.yaml 2022-07-04 20:56:43 +00:00			`- "{{BaseURL}}/app/config/security.yml"`

			`stop-at-first-match: true`
templateman update 2023-10-14 11:27:55 +00:00
Create symfony-security.yaml 2022-07-04 20:56:43 +00:00			`matchers-condition: and`
			`matchers:`
			`- type: word`
			`words:`
			`- 'security:'`
			`- 'providers:'`
Update symfony-security.yaml 2022-07-05 03:29:59 +00:00			`condition: and`
Create symfony-security.yaml 2022-07-04 20:56:43 +00:00
			`- type: status`
			`status:`
			`- 200`
TemplateMan Update [Fri Oct 20 11:41:12 UTC 2023] :robot: 2023-10-20 11:41:13 +00:00
			`# digest: 490a0046304402206b983d3e4e1ef38d3b4cae7cb19f910b490bd9d810342b577fd73e30f95ce72802206402029e10542ce58e676260699f3ec277efb05242fa7682891cd42ab28e0d40:922c64590222798bb761d5b6d8e72950`