Delete database-credentials.yaml

patch-1
Dhiyaneshwaran 2022-12-10 22:04:48 +05:30 committed by GitHub
parent 2024a1a0b6
commit 5119b6398e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 30 deletions

View File

@ -1,30 +0,0 @@
id: database-credentials
info:
name: Database Credentials File Exposure
author: Hardik-Solanki
severity: high
metadata:
verified: true
github-query: filename:database_credentials.inc
reference:
- https://github.com/maurosoria/dirsearch/blob/master/db/dicc.txt
tags: exposure,database,config,files
requests:
- method: GET
path:
- "{{BaseURL}}/database_credentials.inc"
matchers-condition: and
matchers:
- type: word
part: body
words:
- '$DATABASE_USER'
- '$DATABASE_PASS'
condition: and
- type: status
status:
- 200