nuclei-templates/exposures/apis/wadl-api.yaml

id: wadl-api

info:
  name: wadl file disclosure
  author: 0xrudra,manuelbua
  severity: info
  tags: exposure,api
  reference:
    - https://github.com/dwisiswant0/wadl-dumper
    - https://www.nopsec.com/leveraging-exposed-wadl-xml-in-burp-suite/

requests:
  - method: GET
    path:
      - "{{BaseURL}}/application.wadl"
      - "{{BaseURL}}/application.wadl?detail=true"
      - "{{BaseURL}}/api/application.wadl"
      - "{{BaseURL}}/api/v1/application.wadl"
      - "{{BaseURL}}/api/v2/application.wadl"
    matchers:
      - name: http-get
        type: word
        words:
          - "This is simplified WADL with user and core resources only"
          - "\"http://jersey.java.net/\""
          - "http://wadl.dev.java.net/2009/02"
        condition: or
        part: body
  - method: OPTIONS
    path:
      - "{{BaseURL}}"
      - "{{BaseURL}}/api/v1"
      - "{{BaseURL}}/api/v2"
    matchers:
      - name: http-options
        type: word
        words:
          - "This is simplified WADL with user and core resources only"
          - "\"http://jersey.java.net/\""
          - "http://wadl.dev.java.net/2009/02"
        condition: or
        part: body
moving more files around 2021-01-09 13:02:04 +00:00			`id: wadl-api`
WADL Files Detect WADL files. 2020-04-06 12:27:09 +00:00
			`info:`
			`name: wadl file disclosure`
Updated author names 2021-06-09 12:20:56 +00:00			`author: 0xrudra,manuelbua`
uniform severity update 2020-08-03 21:52:00 +00:00			`severity: info`
misc tag updates 2021-04-06 06:46:11 +00:00			`tags: exposure,api`
Removed pipe (\|) character from references, because the structure requires it to be a string slice, not a string Related nuclei tickets: * #259 - dynamic key-value field support for template information * #940 - new infos in template * #834 * RES-84 2021-08-18 11:37:49 +00:00			`reference:`
Satisfying the linter (all errors and warnings) * whitespace modifications only 2021-08-19 14:44:46 +00:00			`- https://github.com/dwisiswant0/wadl-dumper`
			`- https://www.nopsec.com/leveraging-exposed-wadl-xml-in-burp-suite/`
:speech_balloon: Add references 2020-08-29 12:15:51 +00:00
WADL Files Detect WADL files. 2020-04-06 12:27:09 +00:00			`requests:`
			`- method: GET`
Update syntax 2020-05-25 08:02:27 +00:00			`path:`
WADL Files Detect WADL files. 2020-04-06 12:27:09 +00:00			`- "{{BaseURL}}/application.wadl"`
Remove WSDL check, add additional checks 2020-08-06 18:26:49 +00:00			`- "{{BaseURL}}/application.wadl?detail=true"`
			`- "{{BaseURL}}/api/application.wadl"`
			`- "{{BaseURL}}/api/v1/application.wadl"`
			`- "{{BaseURL}}/api/v2/application.wadl"`
WADL Files Detect WADL files. 2020-04-06 12:27:09 +00:00			`matchers:`
Remove WSDL check, add additional checks 2020-08-06 18:26:49 +00:00			`- name: http-get`
			`type: word`
			`words:`
			`- "This is simplified WADL with user and core resources only"`
			`- "\"http://jersey.java.net/\""`
			`- "http://wadl.dev.java.net/2009/02"`
			`condition: or`
			`part: body`
			`- method: OPTIONS`
			`path:`
Preparing for request clustering 2021-01-13 07:31:46 +00:00			`- "{{BaseURL}}"`
Remove WSDL check, add additional checks 2020-08-06 18:26:49 +00:00			`- "{{BaseURL}}/api/v1"`
			`- "{{BaseURL}}/api/v2"`
			`matchers:`
			`- name: http-options`
			`type: word`
Update syntax 2020-05-25 08:02:27 +00:00			`words:`
WADL Files Detect WADL files. 2020-04-06 12:27:09 +00:00			`- "This is simplified WADL with user and core resources only"`
Update wadl-files.yaml 2020-04-06 12:28:11 +00:00			`- "\"http://jersey.java.net/\""`
WADL Files Detect WADL files. 2020-04-06 12:27:09 +00:00			`- "http://wadl.dev.java.net/2009/02"`
			`condition: or`
			`part: body`