nuclei-templates/misconfiguration/gitlab/gitlab-public-snippets.yaml

33 lines
730 B
YAML
Raw Normal View History

2021-03-25 13:58:05 +00:00
id: gitlab-public-snippets
2021-03-07 13:20:45 +00:00
info:
name: GitLab public snippets
author: pdteam
severity: info
2021-03-12 08:57:14 +00:00
tags: gitlab
2021-03-25 13:58:05 +00:00
reference: |
- https://gist.github.com/vysecurity/20311c29d879e0aba9dcffbe72a88b10
- https://twitter.com/intigriti/status/1375078783338876929
2021-03-07 13:20:45 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}/explore/snippets"
2021-03-25 13:58:05 +00:00
- "{{BaseURL}}/-/snippets"
2021-03-07 13:20:45 +00:00
matchers-condition: and
matchers:
- type: word
words:
- '<title>Snippets · Explore · GitLab</title>'
- type: status
status:
- 200
- type: word
2021-03-18 08:09:58 +00:00
condition: or
words:
- "No snippets found"
2021-03-18 08:09:58 +00:00
- "Nothing here."
negative: true
part: body