Merge pull request #171 from dwisiswant0/development

Update exposed-svn matchers due to False Positive Results
patch-1
bauthard 2020-07-02 17:36:31 +05:30 committed by GitHub
commit 29722f8547
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 4 deletions

View File

@ -2,17 +2,20 @@ id: exposed-svn
info:
name: Exposed SVN Directory
author: udit_thakkur
author: udit_thakkur & dwisiswant0
severity: medium
requests:
- method: GET
path:
- "{{BaseURL}}/.svn/entries"
- "{{BaseURL}}/.svn/prop-base/"
- "{{BaseURL}}/.svn/text-base/"
matchers:
- type: word
words:
- "dir"
- type: regex
part: body
regex:
- "(^10\\s*dir|\\.svn-base|has-props|svn:\\/\\/|[0-9a-f]{32}|[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}.[0-9]{6}Z)"
- type: status
status:
- 200