Update web-config.yaml

exposures/configs/web-config.yaml

@@ -4,12 +4,14 @@ info:
   name: Web Config file
   author: Yash Anand @yashanand155
   severity: info
+  reference: https://github.com/imhunterand/ApachSAL/blob/main/assets/exploits.json
   tags: config,exposure
 
 requests:
   - method: GET
     path:
       - '{{BaseURL}}/web.config'
+      - '{{BaseURL}}/../../web.config'
 
     matchers-condition: and
     matchers:
@@ -21,4 +23,4 @@ requests:
 
       - type: status
         status:
-          - 200
+          - 200