Merge pull request #1913 from projectdiscovery/exposed-gitignore

Added exposed-gitignore
patch-1
Sandeep Singh 2021-07-09 22:52:44 +05:30 committed by GitHub
commit 684761587d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 31 additions and 0 deletions

View File

@ -0,0 +1,31 @@
id: exposed-gitignore
info:
name: Exposed Gitignore
author: TheZakMan
severity: info
tags: config,git,exposure
reference: |
- https://twitter.com/pratiky9967/status/1230001391701086208
- https://www.tenable.com/plugins/was/98595
requests:
- method: GET
path:
- "{{BaseURL}}/.gitignore"
- "{{BaseURL}}/assets/.gitignore"
- "{{BaseURL}}/includes/.gitignore"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: dsl
dsl:
- '!contains(tolower(body), "<html")'
- type: dsl
dsl:
- 'contains(tolower(all_headers), "binary/octet-stream")'