Create snoop-servlet-exposure.yaml

http/exposures/configs/snoop-servlet-exposure.yaml

@@ -0,0 +1,23 @@
+id: snoop-servlet
+
+info:
+  name: Snoop Servlet information disclosure
+  author: omranisecurity
+  severity: medium
+  description: The Snoop Servlet returns information about the HTTP request itself and sometimes. It could help an attacker to prepare more advanced attacks.
+  reference: https://www.acunetix.com/vulnerabilities/web/snoop-servlet-information-disclosure/
+  metadata:
+    shodan-query: http.title:"Snoop Servlet"
+    fofa-query: title=="Snoop Servlet"
+  tags: config,exposure,snoop,snoop-servlet
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/snoop"
+    matchers:
+      - type: dsl
+        dsl:
+          - 'status_code == 200'
+          - 'contains(body, "Snoop Servlet - Request/Client Information")'
+        condition: and