Merge pull request #782 from hahwul/master

Create github-page-files.yml

exposures/files/github-gemfile-files.yaml

@@ -0,0 +1,32 @@
+id: github-gemfile-files
+
+info:
+  name: Github Gemfiles
+  author: hahwul
+  severity: info
+  description: Find github page files(Gemfile / Gemfile.lock)
+  tags: github,exposure
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/Gemfile"
+      - "{{BaseURL}}/Gemfile.lock"
+
+    matchers-condition: or
+    matchers:
+      - type: dsl
+        dsl:
+          - 'contains(body, "https://rubygems.org")'
+          - 'contains(body, "source")'
+          - 'contains(body, "gem")'
+          - 'status_code == 200'
+        condition: and
+
+      - type: dsl
+        dsl:
+          - 'contains(body, "https://rubygems.org")'
+          - 'contains(body, "remote")'
+          - 'contains(body, "specs")'
+          - 'status_code == 200'
+        condition: and

exposures/files/github-page-config.yaml

@@ -0,0 +1,26 @@
+id: github-page-config
+
+info:
+  name: Github pages config file
+  author: hahwul
+  severity: info
+  description: Find github pages config file.
+  tags: github,exposure
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/_config.yml"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        words:
+          - "jekyll"
+          - "title"
+          - "baseurl"
+        condition: and