Remove Equal

I noticed that some vulnerable sites were being missed out since it expected the site to have APP_* which isn't always the case
patch-1
Alfie Njeru 2021-04-07 23:11:57 +03:00 committed by GitHub
parent e2ae9342ee
commit 11dec8ac1b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions

View File

@ -4,7 +4,6 @@ info:
name: Laravel .env file
author: pxmme1337 & dwisiswant0 & geeknik & emenalf
severity: medium
tags: config,exposure
requests:
- method: GET
@ -18,11 +17,12 @@ requests:
- "{{BaseURL}}/.env.example"
- "{{BaseURL}}/.env.stage"
- "{{BaseURL}}/.env.live"
- "{{BaseURL}}/.env_1
matchers-condition: and
matchers:
- type: regex
regex:
- "(?m)^APP_(NAME|ENV|KEY|DEBUG|URL)="
- "(NAME|ENV|KEY|DEBUG|URL|PASSWORD)"
- type: status
status:
- 200