From 1ea3b8a8bff5cc4d045c5281d5de26c848d23ca1 Mon Sep 17 00:00:00 2001 From: sandeep Date: Sat, 24 Jul 2021 03:03:31 +0530 Subject: [PATCH] matcher updates --- .../kubernetes-kustomization-disclosure.yaml | 21 +++++++++++-------- exposures/files/php-user-ini-disclosure.yaml | 2 +- 2 files changed, 13 insertions(+), 10 deletions(-) diff --git a/exposures/configs/kubernetes-kustomization-disclosure.yaml b/exposures/configs/kubernetes-kustomization-disclosure.yaml index f128f9c240..3d11c2d40d 100644 --- a/exposures/configs/kubernetes-kustomization-disclosure.yaml +++ b/exposures/configs/kubernetes-kustomization-disclosure.yaml @@ -14,19 +14,22 @@ requests: matchers-condition: and matchers: - - type: regex - regex: - - "(?m)^\\s*apiVersion\\s*:\\s*kustomize\\.config" - - "(?mi)^\\s*kind\\s*:\\s*Kustomization" - - "(?m)^\\scommonLabels\\s*:" - - "(?m)^\\sresources\\s*:" - - "(?m)^\\snamespace\\s*:" + - type: word part: body + condition: or + words: + - "apiVersion:" + - "resources:" + - "namespace:" + - "commonLabels:" + - "Kustomization" - type: word + part: body + condition: or words: - - "Content-Type: application/yaml" - part: header + - "yaml" + - "yml" - type: status status: diff --git a/exposures/files/php-user-ini-disclosure.yaml b/exposures/files/php-user-ini-disclosure.yaml index 8994cedb7b..0f225008d4 100644 --- a/exposures/files/php-user-ini-disclosure.yaml +++ b/exposures/files/php-user-ini-disclosure.yaml @@ -5,7 +5,7 @@ info: author: dhiyaneshDk severity: medium reference: https://github.com/detectify/ugly-duckling/blob/master/modules/crowdsourced/php-user-ini-disclosure.json - tags: exposure,files + tags: exposure,config requests: - method: GET