matcher updates
parent
9788ebbf27
commit
1ea3b8a8bf
|
@ -14,19 +14,22 @@ requests:
|
||||||
|
|
||||||
matchers-condition: and
|
matchers-condition: and
|
||||||
matchers:
|
matchers:
|
||||||
- type: regex
|
- type: word
|
||||||
regex:
|
|
||||||
- "(?m)^\\s*apiVersion\\s*:\\s*kustomize\\.config"
|
|
||||||
- "(?mi)^\\s*kind\\s*:\\s*Kustomization"
|
|
||||||
- "(?m)^\\scommonLabels\\s*:"
|
|
||||||
- "(?m)^\\sresources\\s*:"
|
|
||||||
- "(?m)^\\snamespace\\s*:"
|
|
||||||
part: body
|
part: body
|
||||||
|
condition: or
|
||||||
|
words:
|
||||||
|
- "apiVersion:"
|
||||||
|
- "resources:"
|
||||||
|
- "namespace:"
|
||||||
|
- "commonLabels:"
|
||||||
|
- "Kustomization"
|
||||||
|
|
||||||
- type: word
|
- type: word
|
||||||
|
part: body
|
||||||
|
condition: or
|
||||||
words:
|
words:
|
||||||
- "Content-Type: application/yaml"
|
- "yaml"
|
||||||
part: header
|
- "yml"
|
||||||
|
|
||||||
- type: status
|
- type: status
|
||||||
status:
|
status:
|
||||||
|
|
|
@ -5,7 +5,7 @@ info:
|
||||||
author: dhiyaneshDk
|
author: dhiyaneshDk
|
||||||
severity: medium
|
severity: medium
|
||||||
reference: https://github.com/detectify/ugly-duckling/blob/master/modules/crowdsourced/php-user-ini-disclosure.json
|
reference: https://github.com/detectify/ugly-duckling/blob/master/modules/crowdsourced/php-user-ini-disclosure.json
|
||||||
tags: exposure,files
|
tags: exposure,config
|
||||||
|
|
||||||
requests:
|
requests:
|
||||||
- method: GET
|
- method: GET
|
||||||
|
|
Loading…
Reference in New Issue