From 0fe0d327b055bd78535c702b51a6a8db2316f750 Mon Sep 17 00:00:00 2001 From: sandeep <8293321+ehsandeep@users.noreply.github.com> Date: Mon, 7 Jun 2021 19:57:59 +0530 Subject: [PATCH] moving files around --- misconfiguration/firebase-urls.yaml | 27 --------------------------- technologies/firebase-urls.yaml | 23 +++++++++++++++++++++++ 2 files changed, 23 insertions(+), 27 deletions(-) delete mode 100644 misconfiguration/firebase-urls.yaml create mode 100644 technologies/firebase-urls.yaml diff --git a/misconfiguration/firebase-urls.yaml b/misconfiguration/firebase-urls.yaml deleted file mode 100644 index 7df4461fa9..0000000000 --- a/misconfiguration/firebase-urls.yaml +++ /dev/null @@ -1,27 +0,0 @@ -id: firebase-urls - -info: - name: Find firebaseio urls to check for security permissions - author: panch0r3d - severity: info - -requests: - - method: GET - path: - - "{{BaseURL}}/" - redirects: true - max-redirects: 5 - headers: - User-Agent: "Mozilla UACanary12345" - matchers-condition: and - matchers: - - type: regex - regex: - - ".*?(f|F)(i|I)(r|R)(e|E)(b|B)(a|A)(s|S)(e|E)(i|I)(o|O)[.](c|C)(o|O)(m|M).*?" - part: body - extractors: - - type: regex - part: body - regex: - - "([^]|[']|[ ]|[:]|http)*(f|F)(i|I)(r|R)(e|E)(b|B)(a|A)(s|S)(e|E)(i|I)(o|O)[.](c|C)(o|O)(m|M).*?([\r\n]|[}]|[,]|[>]|[-]|[ ]|['])" - - "([^]|[']|[ ]|[:]|http)*(d|D)(a|A)(t|T)(a|A)(b|B)(a|A)(s|S)(e|E).*?([\r\n]|[}]|[,]|[>]|[-]|[ ]|['])" diff --git a/technologies/firebase-urls.yaml b/technologies/firebase-urls.yaml new file mode 100644 index 0000000000..67a05cefcb --- /dev/null +++ b/technologies/firebase-urls.yaml @@ -0,0 +1,23 @@ +id: firebase-urls + +info: + name: Google Firebase DB URL Finder + description: Find firebaseio urls to check for security permissions + author: panch0r3d + severity: info + tags: tech,firebase,google + +requests: + - method: GET + path: + - "{{BaseURL}}" + + redirects: true + max-redirects: 1 + + matchers-condition: and + matchers: + - type: regex + regex: + - ".*?(f|F)(i|I)(r|R)(e|E)(b|B)(a|A)(s|S)(e|E)(i|I)(o|O)[.](c|C)(o|O)(m|M).*?" + part: body \ No newline at end of file