Merge pull request #11 from rudrasingh99/master

WADL Files
patch-1
bauthard 2020-04-06 18:00:37 +05:30 committed by GitHub
commit 083ee81040
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 0 deletions

20
files/wadl-files.yaml Normal file
View File

@ -0,0 +1,20 @@
id: wadl-files
info:
name: wadl file disclosure
author: 0xrudra
severity: low
requests:
- method: GET
path:
- "{{BaseURL}}/application.wadl"
- "{{BaseURL}}/service?Wsdl"
matchers:
- type: word
words:
- "This is simplified WADL with user and core resources only"
- "\"http://jersey.java.net/\""
- "http://wadl.dev.java.net/2009/02"
condition: or
part: body