nuclei-templates/http/exposures/files/svn-wc-db.yaml

39 lines
1.1 KiB
YAML
Raw Normal View History

2022-12-10 13:52:24 +00:00
id: svn-wc-db
info:
name: SVN wc.db File Exposure
2023-03-02 10:05:55 +00:00
author: Hardik-Solanki,R12W4N
severity: medium
2024-01-02 16:16:15 +00:00
description: SVN wc.db file is exposed.
2022-12-10 13:52:24 +00:00
reference:
- https://github.com/maurosoria/dirsearch/blob/master/db/dicc.txt
- https://github.com/rapid7/metasploit-framework/blob/master//modules/auxiliary/scanner/http/svn_wcdb_scanner.rb
- https://infosecwriteups.com/indias-aadhar-card-source-code-disclosure-via-exposed-svn-wc-db-c05519ea7761
2022-12-12 18:19:02 +00:00
metadata:
verified: true
2023-10-14 11:27:55 +00:00
max-request: 2
2022-12-12 18:19:02 +00:00
google-query: intitle:"index of" "wc.db"
tags: msf,exposure,svn,config,files
2022-12-10 13:52:24 +00:00
http:
2023-03-06 07:44:46 +00:00
- method: GET
2022-12-10 13:52:24 +00:00
path:
- "{{BaseURL}}/.svn/wc.db"
2023-03-02 10:05:55 +00:00
- "{{BaseURL}}/wc.db"
2022-12-10 13:52:24 +00:00
2023-03-02 10:05:55 +00:00
stop-at-first-match: true
max-size: 10000
2023-10-14 11:27:55 +00:00
2023-03-06 07:37:51 +00:00
matchers-condition: and
2022-12-10 13:52:24 +00:00
matchers:
2023-03-06 07:37:51 +00:00
- type: word
part: body
words:
- 'SQLite format'
- 'WCROOT'
condition: and
2022-12-10 13:52:24 +00:00
- type: status
status:
- 200
# digest: 4a0a0047304502207b3da2350ab0dfe42fea1b9232ea351923200d1ea45bd9d3ae7a0c20ab8b1a5102210094ee3f8bfe328ad9a92ca4f3473a4e14a0dfe5e9f2a598b38282b826b31c7f38:922c64590222798bb761d5b6d8e72950