matcher updates

patch-1
sandeep 2021-07-24 03:03:31 +05:30
parent 9788ebbf27
commit 1ea3b8a8bf
2 changed files with 13 additions and 10 deletions

View File

@ -14,19 +14,22 @@ requests:
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: regex - type: word
regex:
- "(?m)^\\s*apiVersion\\s*:\\s*kustomize\\.config"
- "(?mi)^\\s*kind\\s*:\\s*Kustomization"
- "(?m)^\\scommonLabels\\s*:"
- "(?m)^\\sresources\\s*:"
- "(?m)^\\snamespace\\s*:"
part: body part: body
condition: or
words:
- "apiVersion:"
- "resources:"
- "namespace:"
- "commonLabels:"
- "Kustomization"
- type: word - type: word
part: body
condition: or
words: words:
- "Content-Type: application/yaml" - "yaml"
part: header - "yml"
- type: status - type: status
status: status:

View File

@ -5,7 +5,7 @@ info:
author: dhiyaneshDk author: dhiyaneshDk
severity: medium severity: medium
reference: https://github.com/detectify/ugly-duckling/blob/master/modules/crowdsourced/php-user-ini-disclosure.json reference: https://github.com/detectify/ugly-duckling/blob/master/modules/crowdsourced/php-user-ini-disclosure.json
tags: exposure,files tags: exposure,config
requests: requests:
- method: GET - method: GET