Update and rename django-framework-exceptions-http.yaml to exposed-django-variable.yaml
parent
647f2649b3
commit
51f8d946da
|
@ -1,7 +1,7 @@
|
|||
id: django-framework-exceptions-http
|
||||
id: exposed-django-variable
|
||||
|
||||
info:
|
||||
name: Exposed django variables
|
||||
name: Exposed Django variables
|
||||
author: nobody
|
||||
severity: low
|
||||
description: Detects suspicious Django web application framework exceptions that could indicate exploitation attempts
|
||||
|
@ -9,6 +9,8 @@ info:
|
|||
- https://docs.djangoproject.com/en/1.11/ref/exceptions/
|
||||
- https://docs.djangoproject.com/en/1.11/topics/logging/#django-security
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/master/file/logs/django-framework-exceptions.yaml
|
||||
metadata:
|
||||
verified: true
|
||||
tags: config,exposure,django
|
||||
|
||||
requests:
|
||||
|
@ -33,13 +35,13 @@ requests:
|
|||
- 'SuspiciousSession'
|
||||
- 'TooManyFieldsSent'
|
||||
- 'PermissionDenied'
|
||||
condition: or
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 400
|
||||
condition: and
|
||||
|
||||
- type: word
|
||||
part: header
|
||||
words:
|
||||
- "text/html"
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 400
|
Loading…
Reference in New Issue