Merge pull request #959 from YashGoti/patch-2

Create wp-uploads.yaml
2021-02-26 11:05:43 +05:30 · 2021-02-26 11:05:43 +05:30 · 04dadd5d42
parent 465ddcec4b 9d0bf90c62
commit 04dadd5d42
1 changed files with 31 additions and 0 deletions
--- a/miscellaneous/wp-uploads-listing.yaml
+++ b/miscellaneous/wp-uploads-listing.yaml
@ -0,0 +1,31 @@
+id: wp-uploads-listing
+
+info:
+  name: WordPress Upload Directory Listing Enable
+  author: yashgoti
+  severity: info
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/wp-content/uploads/"
+      - "{{BaseURL}}/wp-content/uploads/2015/"
+      - "{{BaseURL}}/wp-content/uploads/2016/"
+      - "{{BaseURL}}/wp-content/uploads/2017/"
+      - "{{BaseURL}}/wp-content/uploads/2018/"
+      - "{{BaseURL}}/wp-content/uploads/2019/"
+      - "{{BaseURL}}/wp-content/uploads/2020/"
+      - "{{BaseURL}}/wp-content/uploads/2021/"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "Directory listing for"
+          - "Index of /"
+          - "[To Parent Directory]"
+          - "Directory: /"
+
+      - type: status
+        status:
+          - 200