6 New Templates Added (Files,Config) (#4574)

* Create karma-configuration-file.yaml

* Update and rename karma-configuration-file.yaml to appveyor-configuration-file.yaml

* Create karma-config-js.yaml

* Create phpunit-result-cache-exposure.yaml

* Create styleci-yml-disclosure.yaml

* Create webpack-mix-js.yaml

* Create proxy-wpad-exposure.yaml

* Create wp-cli-exposure.yaml

* Create npm-shrinkwrap-exposure.yaml

* misc updates

* misc updates

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
patch-1
Dhiyaneshwaran 2022-06-12 08:31:58 +01:00 committed by GitHub
parent fbe68726ae
commit 03484fb750
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
6 changed files with 167 additions and 0 deletions

View File

@ -0,0 +1,28 @@
id: proxy-wpad-exposure
info:
name: Proxy WPAD Configuration Exposure
author: DhiyaneshDk
severity: low
metadata:
verified: true
shodan-query: html:"wpad.dat"
tags: config,exposure,proxy
requests:
- method: GET
path:
- "{{BaseURL}}/wpad.dat"
matchers-condition: and
matchers:
- type: word
words:
- "FindProxyForURL"
- "url"
- "host"
condition: and
- type: status
status:
- 200

View File

@ -0,0 +1,32 @@
id: npm-shrinkwrap-exposure
info:
name: Node Shrinkwrap Exposure
author: DhiyaneshDk
severity: info
metadata:
verified: true
shodan-query: html:"npm-shrinkwrap.json"
tags: config,exposure,npm
requests:
- method: GET
path:
- "{{BaseURL}}/npm-shrinkwrap.json"
matchers-condition: and
matchers:
- type: word
words:
- "version"
- "dependencies"
condition: and
- type: word
part: header
words:
- "application/json"
- type: status
status:
- 200

View File

@ -0,0 +1,25 @@
id: phpunit-result-cache-exposure
info:
name: PHPUnit Result Cache File Exposure
author: DhiyaneshDk
severity: low
metadata:
verified: true
shodan-query: ".phpunit.result.cache"
tags: config,exposure,devops
requests:
- method: GET
path:
- "{{BaseURL}}/.phpunit.result.cache"
matchers-condition: and
matchers:
- type: word
words:
- '"defects"'
- type: status
status:
- 200

View File

@ -0,0 +1,28 @@
id: styleci-yml-disclosure
info:
name: StyleCi Yaml File Disclosure
author: DhiyaneshDk
severity: info
metadata:
verified: true
shodan-query: ".styleci.yml"
tags: config,exposure,devops
requests:
- method: GET
path:
- "{{BaseURL}}/.styleci.yml"
matchers-condition: and
matchers:
- type: word
words:
- "php"
- "preset"
- "disabled"
condition: and
- type: status
status:
- 200

View File

@ -0,0 +1,27 @@
id: webpack-mix-js
info:
name: Webpack Mix File Disclosure
author: DhiyaneshDk
severity: info
metadata:
verified: true
shodan-query: html:"webpack.mix.js"
tags: config,exposure,devops
requests:
- method: GET
path:
- "{{BaseURL}}/webpack.mix.js"
matchers-condition: and
matchers:
- type: word
words:
- "Mix Asset Management"
- "const mix"
condition: and
- type: status
status:
- 200

View File

@ -0,0 +1,27 @@
id: wp-cli-exposure
info:
name: WP-CLI Yaml File Exposure
author: DhiyaneshDk
severity: info
metadata:
verified: true
shodan-query: html:"wp-cli.yml"
tags: config,exposure,wp-cli
requests:
- method: GET
path:
- "{{BaseURL}}/wp-cli.yml"
matchers-condition: and
matchers:
- type: word
words:
- "apache_modules:"
- "mod_rewrite"
condition: and
- type: status
status:
- 200