diff --git a/exposures/configs/exposed-hg.yaml b/exposures/configs/exposed-hg.yaml new file mode 100644 index 0000000000..471370bb53 --- /dev/null +++ b/exposures/configs/exposed-hg.yaml @@ -0,0 +1,18 @@ +id: exposed-hg + +info: + name: Exposed HG Directory + author: daffainfo + severity: medium + +requests: + - method: GET + path: + - "{{BaseURL}}/.hg/hgrc" + + matchers: + - type: word + words: + - "[paths]" + - "default" + condition: and