updated matcher

patch-1
Ritik Chaddha 2023-06-14 22:49:46 +05:30 committed by GitHub
parent adbd551d44
commit 0ec76d40d1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 10 deletions

View File

@ -9,9 +9,9 @@ info:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss-score: 5.3
cwe-id: CWE-200
tags: config,exposure
metadata:
max-request: 1
verified: true
tags: config,exposure,aws,credential
http:
- method: GET
@ -20,15 +20,15 @@ http:
matchers-condition: and
matchers:
- type: word
words:
- "[default]"
- type: regex
regex:
- 'aws_access_key_id\s*=\s*'
- 'region\s*=\s*'
- type: dsl
dsl:
- "!contains(tolower(body), '<html')"
- "!contains(tolower(body), '<body')"
condition: and
- type: word
part: body
words:
- '[default]'
- type: status
status: