add template for .idea files with sensitive data

patch-1
martincodes 2021-10-20 22:13:41 +02:00
parent 6f2e88034d
commit 5f7519a89a
1 changed files with 19 additions and 0 deletions

View File

@ -0,0 +1,19 @@
id: .idea-folder-with.sensitive-files
info:
name: Reachable or public .idea-Folder files containing sensitive data
author: martincodes-de
severity: high
description: Searches for .idea-Folder by querying the /.idea and a few other files with sensitive data endpoints
tags: phpstorm, jetbrains, .idea, sensitive data
requests:
- method: GET
path:
- "{{BaseURL}}/.idea/httpRequests/http-requests-log.http"
- "{{BaseURL}}/.idea/deployment.xml"
- "{{BaseURL}}/.idea/workspace.xml"
matchers:
- type: status
status:
- 200