nuclei-templates/http/exposures/files/symfony-security.yaml

id: symfony-security

info:
  name: Symfony security.yml File Disclosure
  author: DhiyaneshDK
  severity: info
  metadata:
    max-request: 3
    verified: true
    google-query: intitle:"index of" "security.yml"
  tags: symfony,devops,exposure,files

http:
  - method: GET
    path:
      - "{{BaseURL}}/security.yml"
      - "{{BaseURL}}/config/security.yml"
      - "{{BaseURL}}/app/config/security.yml"

    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: word
        words:
          - 'security:'
          - 'providers:'
        condition: and

      - type: status
        status:
          - 200
Create symfony-security.yaml 2022-07-04 20:56:43 +00:00			`id: symfony-security`

			`info:`
			`name: Symfony security.yml File Disclosure`
			`author: DhiyaneshDK`
Update symfony-security.yaml 2022-07-05 03:29:59 +00:00			`severity: info`
Create symfony-security.yaml 2022-07-04 20:56:43 +00:00			`metadata:`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`max-request: 3`
Update symfony-security.yaml 2022-07-05 03:29:59 +00:00			`verified: true`
Replace google-dork with google-query in all templates (#5328) * dos2unix to standardize line endings * Replace google-dork with google-query 2022-09-08 22:39:14 +00:00			`google-query: intitle:"index of" "security.yml"`
update tags 2022-10-13 10:12:07 +00:00			`tags: symfony,devops,exposure,files`
Create symfony-security.yaml 2022-07-04 20:56:43 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Create symfony-security.yaml 2022-07-04 20:56:43 +00:00			`- method: GET`
			`path:`
			`- "{{BaseURL}}/security.yml"`
Update symfony-security.yaml 2022-07-04 20:58:52 +00:00			`- "{{BaseURL}}/config/security.yml"`
Create symfony-security.yaml 2022-07-04 20:56:43 +00:00			`- "{{BaseURL}}/app/config/security.yml"`

			`stop-at-first-match: true`
			`matchers-condition: and`
			`matchers:`
			`- type: word`
			`words:`
			`- 'security:'`
			`- 'providers:'`
Update symfony-security.yaml 2022-07-05 03:29:59 +00:00			`condition: and`
Create symfony-security.yaml 2022-07-04 20:56:43 +00:00
			`- type: status`
			`status:`
			`- 200`