matcher updates

patch-1
sandeep 2021-07-24 03:03:31 +05:30
parent 9788ebbf27
commit 1ea3b8a8bf
2 changed files with 13 additions and 10 deletions

View File

@ -14,19 +14,22 @@ requests:
matchers-condition: and
matchers:
- type: regex
regex:
- "(?m)^\\s*apiVersion\\s*:\\s*kustomize\\.config"
- "(?mi)^\\s*kind\\s*:\\s*Kustomization"
- "(?m)^\\scommonLabels\\s*:"
- "(?m)^\\sresources\\s*:"
- "(?m)^\\snamespace\\s*:"
- type: word
part: body
condition: or
words:
- "apiVersion:"
- "resources:"
- "namespace:"
- "commonLabels:"
- "Kustomization"
- type: word
part: body
condition: or
words:
- "Content-Type: application/yaml"
part: header
- "yaml"
- "yml"
- type: status
status:

View File

@ -5,7 +5,7 @@ info:
author: dhiyaneshDk
severity: medium
reference: https://github.com/detectify/ugly-duckling/blob/master/modules/crowdsourced/php-user-ini-disclosure.json
tags: exposure,files
tags: exposure,config
requests:
- method: GET