Create exposed-hg.yaml

2021-03-02 18:32:14 +07:00 · 2021-03-02 18:32:14 +07:00 · 50de7f79cf
parent c56ba05165
commit 50de7f79cf
1 changed files with 18 additions and 0 deletions
--- a/exposures/configs/exposed-hg.yaml
+++ b/exposures/configs/exposed-hg.yaml
@ -0,0 +1,18 @@
+id: exposed-hg
+
+info:
+  name: Exposed HG Directory
+  author: daffainfo
+  severity: medium
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/.hg/hgrc"
+      
+    matchers:
+      - type: word
+        words:
+          - "[paths]"
+          - "default"
+        condition: and