Merge pull request #1632 from geeknik/patch-103

Update rails-database-config.yaml
patch-1
Sandeep Singh 2021-06-06 14:16:53 +05:30 committed by GitHub
commit 25fdd0068e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 3 deletions

View File

@ -2,18 +2,24 @@ id: rails-database-config
info: info:
name: Ruby-on-Rails Database Configuration Exposure name: Ruby-on-Rails Database Configuration Exposure
author: pdteam author: pdteam & geeknik
severity: low severity: low
tags: config,exposure tags: config,exposure,rails
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/config/database.yml" - "{{BaseURL}}/config/database.yml"
matchers: matchers:
- type: word - type: word
words: words:
- "adapter:" - "adapter:"
- "database:" - "database:"
- "production:"
condition: and condition: and
part: body part: body
- type: status
status:
- 200