daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/exposures/backups/zip-backup-files.yaml

63 lines
1.9 KiB
YAML
Raw Normal View History

change id
2020-04-22 14:55:53 +00:00
id: zip-backup-files
add zip-files.yaml Scan for potential compressed web folder at the root level of the target. Scan for few extensions and valid magic numbers for reliability.
2020-04-21 19:26:15 +00:00
info:
:hammer: Add header matcher for content-type
2020-09-09 14:26:30 +00:00
name: Compressed Web File
Updated author names
2021-06-09 12:20:56 +00:00
author: Toufik Airane,dwisiswant0
add zip-files.yaml Scan for potential compressed web folder at the root level of the target. Scan for few extensions and valid magic numbers for reliability.
2020-04-21 19:26:15 +00:00
severity: medium
misc tag updates
2021-04-06 06:46:11 +00:00
tags: exposure,backup
add zip-files.yaml Scan for potential compressed web folder at the root level of the target. Scan for few extensions and valid magic numbers for reliability.
2020-04-21 19:26:15 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}/{{Hostname}}.7z"
- "{{BaseURL}}/{{Hostname}}.bz2"
- "{{BaseURL}}/{{Hostname}}.gz"
- "{{BaseURL}}/{{Hostname}}.lz"
- "{{BaseURL}}/{{Hostname}}.rar"
- "{{BaseURL}}/{{Hostname}}.tar.gz"
- "{{BaseURL}}/{{Hostname}}.xz"
- "{{BaseURL}}/{{Hostname}}.zip"
- "{{BaseURL}}/{{Hostname}}.z"
- "{{BaseURL}}/{{Hostname}}.tar.z"
- "{{BaseURL}}/{{Hostname}}.db"
- "{{BaseURL}}/{{Hostname}}.sqlite"
- "{{BaseURL}}/{{Hostname}}.sqlitedb"
- "{{BaseURL}}/{{Hostname}}.sql.7z"
- "{{BaseURL}}/{{Hostname}}.sql.bz2"
- "{{BaseURL}}/{{Hostname}}.sql.gz"
- "{{BaseURL}}/{{Hostname}}.sql.lz"
- "{{BaseURL}}/{{Hostname}}.sql.rar"
- "{{BaseURL}}/{{Hostname}}.sql.tar.gz"
- "{{BaseURL}}/{{Hostname}}.sql.xz"
- "{{BaseURL}}/{{Hostname}}.sql.zip"
- "{{BaseURL}}/{{Hostname}}.sql.z"
- "{{BaseURL}}/{{Hostname}}.sql.tar.z"
Adding max-size limit to avoid timeout
2021-06-01 07:35:11 +00:00
max-size: 500 # Size in bytes - Max Size to read from server response
Fixed default condition OR to AND in false-positives
2020-07-08 11:38:57 +00:00
matchers-condition: and
add zip-files.yaml Scan for potential compressed web folder at the root level of the target. Scan for few extensions and valid magic numbers for reliability.
2020-04-21 19:26:15 +00:00
matchers:
- type: binary
binary:
Update zip-backup-files.yaml Fix a yamlint error because of space.
2020-09-12 18:56:58 +00:00
- "377ABCAF271C" # 7z
- "314159265359" # bz2
- "53514c69746520666f726d6174203300" # SQLite format 3.
- "1f8b" # gz tar.gz
- "526172211A0700" # rar RAR archive version 1.50
- "526172211A070100" # rar RAR archive version 5.0
- "FD377A585A0000" # xz tar.xz
- "1F9D" # z tar.z
- "1FA0" # z tar.z
- "4C5A4950" # lz
- "504B0304" # zip
add zip-files.yaml Scan for potential compressed web folder at the root level of the target. Scan for few extensions and valid magic numbers for reliability.
2020-04-21 19:26:15 +00:00
condition: or
Updating the template name.
2020-04-21 22:55:04 +00:00
part: body
Adding max-size limit to avoid timeout
2021-06-01 07:35:11 +00:00
:hammer: Add header matcher for content-type
2020-09-09 14:26:30 +00:00
- type: regex
regex:
- "application/[-\\w.]+"
part: header
Adding max-size limit to avoid timeout
2021-06-01 07:35:11 +00:00
fix bz2 false-positive - Fix minor issue with bz2 by strengthening the magic number - Add the status 200 filter - Change link to github.com.
2020-04-22 14:52:54 +00:00
- type: status
status:
Update syntax
2020-05-25 08:02:27 +00:00
- 200