diff --git a/files/wadl-files.yaml b/files/wadl-files.yaml new file mode 100644 index 0000000000..a329c9cb26 --- /dev/null +++ b/files/wadl-files.yaml @@ -0,0 +1,20 @@ +id: wadl-files + +info: + name: wadl file disclosure + author: 0xrudra + severity: low + +requests: + - method: GET + path: + - "{{BaseURL}}/application.wadl" + - "{{BaseURL}}/service?Wsdl" + matchers: + - type: word + words: + - "This is simplified WADL with user and core resources only" + - "\"http://jersey.java.net/\"" + - "http://wadl.dev.java.net/2009/02" + condition: or + part: body