From 14786f26dfe2a09551bad27113c880543ad3cb9d Mon Sep 17 00:00:00 2001 From: YashGoti <39102999+YashGoti@users.noreply.github.com> Date: Thu, 25 Feb 2021 21:05:25 +0530 Subject: [PATCH] Create wp-license --- exposures/files/wp-license | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 exposures/files/wp-license diff --git a/exposures/files/wp-license b/exposures/files/wp-license new file mode 100644 index 0000000000..132050d405 --- /dev/null +++ b/exposures/files/wp-license @@ -0,0 +1,30 @@ +id: wp-license + +info: + name: WordPress License File Discloser + author: yashgoti + severity: info + description: Wordpress default license file discloser to identify wordpress is running + +requests: + - method: GET + path: + - "{{BaseURL}}/license.txt" + + matchers-condition: and + matchers: + - type: word + words: + - "WordPress" + - " - " + - "Web publishing software" + condition: and + + - type: word + words: + - "text/plain" + part: header + + - type: status + status: + - 200