From 03a8c16f7178c01be2026bae78758511214dd784 Mon Sep 17 00:00:00 2001 From: sandeep Date: Wed, 27 Apr 2022 03:06:21 +0530 Subject: [PATCH] tags update --- exposures/logs/rails-debug-mode.yaml | 11 ++++++----- misconfiguration/rack-mini-profiler.yaml | 3 ++- 2 files changed, 8 insertions(+), 6 deletions(-) diff --git a/exposures/logs/rails-debug-mode.yaml b/exposures/logs/rails-debug-mode.yaml index 41809550db..bde8cd12bd 100644 --- a/exposures/logs/rails-debug-mode.yaml +++ b/exposures/logs/rails-debug-mode.yaml @@ -1,19 +1,20 @@ id: rails-debug-mode info: - name: Rails Debug Mode Enabled + name: Rails Debug Mode author: pdteam severity: medium - tags: logs,rails,exposure + tags: debug,rails,exposure requests: - method: GET path: - - "{{BaseURL}}/1238a92f573a48e58d356c42ca2c9610" + - "{{BaseURL}}/{{randstr}}" + matchers: - type: word + part: body words: - "Rails.root:" - "Action Controller: Exception caught" - condition: and - part: body \ No newline at end of file + condition: and \ No newline at end of file diff --git a/misconfiguration/rack-mini-profiler.yaml b/misconfiguration/rack-mini-profiler.yaml index c6743ef9a6..78ca392d9d 100644 --- a/misconfiguration/rack-mini-profiler.yaml +++ b/misconfiguration/rack-mini-profiler.yaml @@ -4,7 +4,7 @@ info: name: rack-mini-profiler environment information disclosure author: vzamanillo severity: high - tags: config,debug + tags: config,debug,rails requests: - method: GET @@ -16,6 +16,7 @@ requests: - type: word words: - "Rack Environment" + - type: status status: - 200