diff --git a/exposures/configs/codeigniter-env.yaml b/exposures/configs/codeigniter-env.yaml new file mode 100644 index 0000000000..b1a1b0c02b --- /dev/null +++ b/exposures/configs/codeigniter-env.yaml @@ -0,0 +1,30 @@ +id: codeigniter-env + +info: + name: Codeigniter .env file + author: emenalf + severity: high + +requests: + - method: GET + path: + - "{{BaseURL}}/.env" + - "{{BaseURL}}/.env.dev.local" + - "{{BaseURL}}/.env.development.local" + - "{{BaseURL}}/.env.prod.local" + - "{{BaseURL}}/.env.production.local" + - "{{BaseURL}}/.env.local" + - "{{BaseURL}}/.env.example" + - "{{BaseURL}}/.env.stage" + - "{{BaseURL}}/.env.live" + - "{{BaseURL}}/.env_1" + - "{{BaseURL}}/.env.old" + - "{{BaseURL}}/.env_sample" + matchers-condition: and + matchers: + - type: regex + regex: + - "(NAME|ENV|KEY|DEBUG|URL|PASSWORD)" + - type: status + status: + - 200