diff --git a/exposures/configs/ventrilo-config.yaml b/exposures/configs/ventrilo-config.yaml new file mode 100644 index 0000000000..655004126c --- /dev/null +++ b/exposures/configs/ventrilo-config.yaml @@ -0,0 +1,32 @@ +id: ventrilo-config + +info: + name: Ventrilo Configuration File + author: geeknik + reference: https://www.ventrilo.com/setup.php + description: It discloses the AdminPassword and Password of the application. + severity: high + tags: ventrilo,config,exposure + +requests: + - method: GET + path: + - "{{BaseURL}}/ventrilo_srv.ini" + + matchers-condition: and + matchers: + - type: word + words: + - "[Server]" + - "Name" + - "Phonetic" + condition: and + + - type: word + part: header + words: + - "text/plain" + + - type: status + status: + - 200