Add template for docker-compose config disclosure (#837)

patch-1
meme-lord 2021-02-10 20:15:57 +00:00 committed by GitHub
parent aefbc1db67
commit 512030fc3a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 22 additions and 0 deletions

View File

@ -0,0 +1,22 @@
id: docker-compose-config
info:
name: docker-compose.yml exposure
author: meme-lord & blckraven
severity: medium
requests:
- method: GET
redirects: true
max-redirects: 3
path:
- "{{BaseURL}}/docker-compose.yml"
matchers-condition: and
matchers:
- type: dsl
dsl:
- 'regex("^version: ", body) && contains(body, "services:") == true'
- type: status
status:
- 200