nuclei-templates/exposures/files/secrets-file.yaml

46 lines
985 B
YAML
Raw Normal View History

2022-07-04 19:11:27 +00:00
id: ruby-secrets-file
2022-07-04 19:09:01 +00:00
info:
2022-07-04 19:11:27 +00:00
name: Ruby on Rails secrets.yml File Exposure
2022-07-04 19:09:01 +00:00
author: DhiyaneshDK
severity: high
reference: https://www.exploit-db.com/ghdb/6283
metadata:
2022-07-05 04:24:33 +00:00
verified: true
google-query: intitle:"index of" "secrets.yml"
2022-10-13 10:12:07 +00:00
tags: misconfig,cloud,devops,files
2022-07-04 19:09:01 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}/secrets.yml"
- "{{BaseURL}}/config/secrets.yml"
- "{{BaseURL}}/test/config/secrets.yml"
- "{{BaseURL}}/redmine/config/secrets.yml"
stop-at-first-match: true
matchers-condition: and
matchers:
2022-07-05 04:07:53 +00:00
- type: regex
regex:
- 'secret_key_base: ([a-z0-9]+)'
2022-07-04 19:09:01 +00:00
- type: word
2022-07-05 04:07:53 +00:00
part: header
2022-07-04 19:09:01 +00:00
words:
2022-07-05 04:07:53 +00:00
- "application/json"
- "text/html"
negative: true
condition: and
2022-07-04 19:09:01 +00:00
- type: status
status:
- 200
2022-07-05 04:07:53 +00:00
extractors:
- type: regex
part: body
group: 1
regex:
- 'secret_key_base: ([a-z0-9]+)'