diff --git a/exposures/files/.idea-folder-with-sensitive-files.yaml b/exposures/files/.idea-folder-with-sensitive-files.yaml new file mode 100644 index 0000000000..123c126d92 --- /dev/null +++ b/exposures/files/.idea-folder-with-sensitive-files.yaml @@ -0,0 +1,19 @@ +id: .idea-folder-with.sensitive-files + +info: + name: Reachable or public .idea-Folder files containing sensitive data + author: martincodes-de + severity: high + description: Searches for .idea-Folder by querying the /.idea and a few other files with sensitive data endpoints + tags: phpstorm, jetbrains, .idea, sensitive data + +requests: + - method: GET + path: + - "{{BaseURL}}/.idea/httpRequests/http-requests-log.http" + - "{{BaseURL}}/.idea/deployment.xml" + - "{{BaseURL}}/.idea/workspace.xml" + matchers: + - type: status + status: + - 200 \ No newline at end of file