Merge pull request #5064 from projectdiscovery/pubspec-config

Create pubspec-config.yaml
patch-1
Prince Chaddha 2022-08-11 15:28:13 -07:00 committed by GitHub
commit 2d143c9091
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 31 additions and 0 deletions

View File

@ -0,0 +1,31 @@
id: pubspec-config
info:
name: Pubspec YAML Configuration File Exposure
author: DhiyaneshDk
severity: low
metadata:
verified: true
shodan-query: html:"pubspec.yaml"
tags: exposure,devops,pubsec,config,cicd
requests:
- method: GET
path:
- "{{BaseURL}}/pubspec.yaml"
- "{{BaseURL}}/assets/pubspec.yaml"
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
part: body
words:
- "version:"
- "environment:"
- "dependencies:"
condition: and
- type: status
status:
- 200