Create git-logs

git-logs

@@ -0,0 +1,29 @@
+id: git-logs
+
+info:
+  name: Git Logs Disclosure
+  author: Mahendra Purbia (Mah3Sec_)
+  severity: medium
+  description: Searches for the pattern /.git/logs/HEAD on passed URLs.
+  tags: logs,git,exposure
+
+requests:
+  - raw:
+      - |
+        GET /.git/logs/HEAD HTTP/1.1
+        Host: {{Hostname}}
+        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0
+        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
+        Accept-Language: en-US,en;q=0.5
+        Content-Type: application/x-www-form-urlencoded
+        Content-Length: 1
+        Connection: close
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "root"
+
+      - type: dsl
+        dsl:
+          - 'contains(tolower(body), "<html") == false && contains(tolower(body), "</body>") == false'