nuclei-templates/http/exposures/configs/composer-config.yaml

id: composer-config

info:
  name: Composer Config - Detect
  author: Mahendra Purbia (Mah3Sec_)
  severity: info
  description: Composer configuration file detected.
  reference: https://getcomposer.org/
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cvss-score: 0.0
    cwe-id: CWE-200
  tags: config,exposure
  metadata:
    max-request: 4

http:
  - method: GET
    path:
      - "{{BaseURL}}/composer.json"
      - "{{BaseURL}}/composer.lock"
      - "{{BaseURL}}/.composer/composer.json"
      - "{{BaseURL}}/vendor/composer/installed.json"

    matchers:
      - type: dsl
        name: composer.lock
        dsl:
          - "contains(body, 'packages') && contains(tolower(all_headers), 'application/octet-stream') && status_code == 200"

      - type: dsl
        name: composer.json
        dsl:
          - "contains(body, 'require') && contains(tolower(all_headers), 'application/json') && status_code == 200"

# Enhanced by mp on 2023/02/05
lint fixes 2021-01-10 22:54:00 +00:00			`id: composer-config`
Create composer-config.yaml 2020-12-28 15:46:09 +00:00
			`info:`
Enhancement: exposures/configs/composer-config.yaml by mp 2023-02-05 17:59:20 +00:00			`name: Composer Config - Detect`
Create composer-config.yaml 2020-12-28 15:46:09 +00:00			`author: Mahendra Purbia (Mah3Sec_)`
Update composer-config.yaml 2020-12-28 15:59:57 +00:00			`severity: info`
Enhancement: exposures/configs/composer-config.yaml by mp 2023-02-05 17:00:27 +00:00			`description: Composer configuration file detected.`
Enhancement: exposures/configs/composer-config.yaml by mp 2023-02-05 16:55:55 +00:00			`reference: https://getcomposer.org/`
Enhancement: exposures/configs/composer-config.yaml by mp 2023-02-05 16:52:25 +00:00			`classification:`
			`cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N`
			`cvss-score: 0.0`
			`cwe-id: CWE-200`
misc tag updates 2021-04-06 06:46:11 +00:00			`tags: config,exposure`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`metadata:`
			`max-request: 4`
Create composer-config.yaml 2020-12-28 15:46:09 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Create composer-config.yaml 2020-12-28 15:46:09 +00:00			`- method: GET`
			`path:`
			`- "{{BaseURL}}/composer.json"`
			`- "{{BaseURL}}/composer.lock"`
Update composer-config.yaml 2021-01-02 06:41:27 +00:00			`- "{{BaseURL}}/.composer/composer.json"`
Add further path to composer-config.yaml If the vendor directory is part of the web root you can also find the config in the provided path. Of course you've then also some more problems besides that ;) 2021-01-15 09:29:10 +00:00			`- "{{BaseURL}}/vendor/composer/installed.json"`
few updates 2020-12-28 15:59:31 +00:00
Create composer-config.yaml 2020-12-28 15:46:09 +00:00			`matchers:`
matcher updates 2021-01-02 06:40:26 +00:00			`- type: dsl`
			`name: composer.lock`
			`dsl:`
removing redundant boolean check 2021-03-24 23:28:50 +00:00			`- "contains(body, 'packages') && contains(tolower(all_headers), 'application/octet-stream') && status_code == 200"`
Create composer-config.yaml 2020-12-28 15:46:09 +00:00
matcher updates 2021-01-02 06:40:26 +00:00			`- type: dsl`
			`name: composer.json`
			`dsl:`
removing redundant boolean check 2021-03-24 23:28:50 +00:00			`- "contains(body, 'require') && contains(tolower(all_headers), 'application/json') && status_code == 200"`
Enhancement: exposures/configs/composer-config.yaml by mp 2023-02-05 16:52:25 +00:00
			`# Enhanced by mp on 2023/02/05`