Remove Equal
I noticed that some vulnerable sites were being missed out since it expected the site to have APP_* which isn't always the casepatch-1
parent
e2ae9342ee
commit
11dec8ac1b
|
@ -4,7 +4,6 @@ info:
|
|||
name: Laravel .env file
|
||||
author: pxmme1337 & dwisiswant0 & geeknik & emenalf
|
||||
severity: medium
|
||||
tags: config,exposure
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
|
@ -18,11 +17,12 @@ requests:
|
|||
- "{{BaseURL}}/.env.example"
|
||||
- "{{BaseURL}}/.env.stage"
|
||||
- "{{BaseURL}}/.env.live"
|
||||
- "{{BaseURL}}/.env_1
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: regex
|
||||
regex:
|
||||
- "(?m)^APP_(NAME|ENV|KEY|DEBUG|URL)="
|
||||
- "(NAME|ENV|KEY|DEBUG|URL|PASSWORD)"
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
|
Loading…
Reference in New Issue