From 41669cb8f62ccd13f80d3ee4f2d2179fe8f5b008 Mon Sep 17 00:00:00 2001 From: pussycat0x <65701233+pussycat0x@users.noreply.github.com> Date: Sun, 21 Nov 2021 06:45:24 +0530 Subject: [PATCH] Add files via upload --- vulnerabilities/wp-mstore-api-detect.yaml | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 vulnerabilities/wp-mstore-api-detect.yaml diff --git a/vulnerabilities/wp-mstore-api-detect.yaml b/vulnerabilities/wp-mstore-api-detect.yaml new file mode 100644 index 0000000000..b61a88029b --- /dev/null +++ b/vulnerabilities/wp-mstore-api-detect.yaml @@ -0,0 +1,22 @@ +id: wp-mstore-api-detect +info: + name: Wordpress Plugin MStore API + author: pussycat0x + severity: low + metadata: + google-dork: inurl:/wp-content/plugins/mstore-api/ + description: Searches for sensitive directories present in the wordpress-plugins plugin. + tags: wordpress,listing +requests: + - method: GET + path: + - "{{BaseURL}}/wp-content/plugins/mstore-api/" + matchers-condition: and + matchers: + - type: word + words: + - "Index of" + - "/wp-content/plugins/mstore-api" + - type: status + status: + - 200 \ No newline at end of file