From 1212c27adc6a9dbab499ea4f657f6fd7b529a4ce Mon Sep 17 00:00:00 2001
From: Dhiyaneshwaran <leedhiyanesh@gmail.com>
Date: Wed, 31 Aug 2022 21:36:39 +0530
Subject: [PATCH] Update web-config.yaml

---
 exposures/configs/web-config.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/exposures/configs/web-config.yaml b/exposures/configs/web-config.yaml
index 7c1e1b7f62..cdf520c94d 100644
--- a/exposures/configs/web-config.yaml
+++ b/exposures/configs/web-config.yaml
@@ -4,12 +4,14 @@ info:
   name: Web Config file
   author: Yash Anand @yashanand155
   severity: info
+  reference: https://github.com/imhunterand/ApachSAL/blob/main/assets/exploits.json
   tags: config,exposure
 
 requests:
   - method: GET
     path:
       - '{{BaseURL}}/web.config'
+      - '{{BaseURL}}/../../web.config'
 
     matchers-condition: and
     matchers:
@@ -21,4 +23,4 @@ requests:
 
       - type: status
         status:
-          - 200
\ No newline at end of file
+          - 200