2021-01-02 20:52:32 +00:00
id : package-json
info :
name : npm package.json disclosure
2021-06-09 12:20:56 +00:00
author : geeknik,afaq
2021-01-02 20:52:32 +00:00
severity : info
description : All npm packages contain a file, usually in the project root, called package.json - this file holds various metadata relevant to the project.
2021-04-06 06:46:11 +00:00
tags : config,exposure
2021-01-02 20:52:32 +00:00
requests :
- method : GET
path :
- "{{BaseURL}}/package.json"
2021-01-07 18:56:47 +00:00
- "{{BaseURL}}/package-lock.json"
2021-01-02 20:52:32 +00:00
matchers-condition : and
matchers :
- type : word
words :
- "name"
- "version"
condition : and
- type : word
words :
- "application/json"
part : header
- type : status
status :
2021-01-03 06:38:37 +00:00
- 200