nuclei-templates/http/miscellaneous/security-txt.yaml

id: security-txt

info:
  name: security.txt File
  author: bad5ect0r,noraj
  severity: info
  description: |
    File similar to robots.txt but intended to be read by humans wishing to contact a website’s owner about security issues. Often defines a security policy and contact details.
  reference:
    - https://securitytxt.org/
    - https://community.turgensec.com/security-txt-progress-in-ethical-security-research/
  metadata:
    verified: true
    max-request: 2
    shodan-query: http.securitytxt:contact http.status:200
  tags: misc,generic

http:
  - method: GET
    path:
      - "{{RootURL}}/.well-known/security.txt"
      - "{{RootURL}}/security.txt"

    stop-at-first-match: true
    redirects: true
    max-redirects: 2
    matchers-condition: and
    matchers:
      - type: word
        words:
          - "Contact:"
          - "Expires:"
        condition: or

      - type: dsl
        dsl:
          - "len(body) <= 4096 && len(body) > 0"

      - type: status
        status:
          - 200

    extractors:
      - type: regex
        group: 1
        regex:
          - '(?mi)Contact:(.*)'
# digest: 490a00463044022063fee5d629fcd71041a28b75faa013e66292f3310e9a53d9e85e7c86f03c32fc02202dc6abf6a02388bcae551aa4d7fd53cc3b45f9d83fe8a2974bfb0e71db86f5ad:922c64590222798bb761d5b6d8e72950
-												Detect security.txt file.

Detect if a site supports responsible disclosure with a security.txt file: https://securitytxt.org/
											
										
										
											2020-05-08 11:06:57 +00:00
+								id: security-txt
 								info:
-												Update security-txt.yaml (#8185)


											
										
										
											2023-09-13 11:24:26 +00:00
+								  name: security.txt File
 								  author: bad5ect0r,noraj
-												uniform severity update

											
										
										
											2020-08-03 21:52:00 +00:00
+								  severity: info
-												Update security-txt.yaml
											
										
										
											2023-12-09 09:09:14 +00:00
+								  description: |
 								    File similar to robots.txt but intended to be read by humans wishing to contact a website’s owner about security issues. Often defines a security policy and contact details.
-												Update security-txt.yaml (#8185)


											
										
										
											2023-09-13 11:24:26 +00:00
+								  reference:
 								    - https://securitytxt.org/
 								    - https://community.turgensec.com/security-txt-progress-in-ethical-security-research/
-												Added max request counter of each template

											
										
										
											2023-04-28 08:11:21 +00:00
+								  metadata:
-												Update security-txt.yaml
											
										
										
											2023-12-09 09:09:14 +00:00
+								    verified: true
-												TemplateMan Update [Tue Dec 12 11:07:51 UTC 2023] :robot:

											
										
										
											2023-12-12 11:07:52 +00:00
+								    max-request: 2
-												Update security-txt.yaml (#8185)


											
										
										
											2023-09-13 11:24:26 +00:00
+								    shodan-query: http.securitytxt:contact http.status:200
 								  tags: misc,generic
-												Detect security.txt file.

Detect if a site supports responsible disclosure with a security.txt file: https://securitytxt.org/
											
										
										
											2020-05-08 11:06:57 +00:00
-												Refactoring the directory structure based on protocols (#7137)

* moving http templates

* updated cves.json

* moved network CVEs

* updated scripts

* updated workflows

* updated requests to http

* replaced network to tcp

---------

Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
											
										
										
											2023-04-27 04:28:59 +00:00
+								http:
-												Detect security.txt file.

Detect if a site supports responsible disclosure with a security.txt file: https://securitytxt.org/
											
										
										
											2020-05-08 11:06:57 +00:00
+								  - method: GET
 								    path:
-												Miscellaneous template updates

											
										
										
											2022-01-28 10:24:49 +00:00
+								      - "{{RootURL}}/.well-known/security.txt"
 								      - "{{RootURL}}/security.txt"
 								    stop-at-first-match: true
-												Update security-txt.yaml
											
										
										
											2023-12-09 09:09:14 +00:00
+								    redirects: true
-												Miscellaneous template updates

											
										
										
											2022-01-28 10:24:49 +00:00
+								    max-redirects: 2
-												Fixed default condition OR to AND in false-positives

											
										
										
											2020-07-08 11:38:57 +00:00
+								    matchers-condition: and
-												Detect security.txt file.

Detect if a site supports responsible disclosure with a security.txt file: https://securitytxt.org/
											
										
										
											2020-05-08 11:06:57 +00:00
+								    matchers:
 								      - type: word
 								        words:
 								          - "Contact:"
-												Additional matcher for security.txt

											
										
										
											2023-12-06 15:13:23 +00:00
+								          - "Expires:"
-												Update security-txt.yaml
											
										
										
											2023-12-09 09:09:14 +00:00
+								        condition: or
-												Miscellaneous template updates

											
										
										
											2022-01-28 10:24:49 +00:00
-												Add more strict rules for security.txt

Previous one had a few false positives. This should narrow that down.
											
										
										
											2020-05-08 11:41:26 +00:00
+								      - type: dsl
 								        dsl:
-												Increase expected security.txt content size limit. (#8778)


											
										
										
											2023-12-06 14:58:27 +00:00
+								          - "len(body) <= 4096 && len(body) > 0"
-												Miscellaneous template updates

											
										
										
											2022-01-28 10:24:49 +00:00
-												Update security-txt.yaml
											
										
										
											2023-12-09 09:09:14 +00:00
+								      - type: status
 								        status:
 								          - 200
-												Miscellaneous template updates

											
										
										
											2022-01-28 10:24:49 +00:00
+								    extractors:
 								      - type: regex
 								        group: 1
 								        regex:
-												Update security-txt.yaml (#8185)


											
										
										
											2023-09-13 11:24:26 +00:00
+								          - '(?mi)Contact:(.*)'
-												Auto Template Signing [Tue Dec 12 12:02:03 UTC 2023] :robot:

											
										
										
											2023-12-12 12:02:03 +00:00
+								# digest: 490a00463044022063fee5d629fcd71041a28b75faa013e66292f3310e9a53d9e85e7c86f03c32fc02202dc6abf6a02388bcae551aa4d7fd53cc3b45f9d83fe8a2974bfb0e71db86f5ad:922c64590222798bb761d5b6d8e72950