diff --git a/exposures/configs/exposed-gitignore.yaml b/exposures/configs/exposed-gitignore.yaml new file mode 100644 index 0000000000..4584811b32 --- /dev/null +++ b/exposures/configs/exposed-gitignore.yaml @@ -0,0 +1,31 @@ +id: exposed-gitignore + +info: + name: Exposed Gitignore + author: TheZakMan + severity: info + tags: config,git,exposure + reference: | + - https://twitter.com/pratiky9967/status/1230001391701086208 + - https://www.tenable.com/plugins/was/98595 + +requests: + - method: GET + path: + - "{{BaseURL}}/.gitignore" + - "{{BaseURL}}/assets/.gitignore" + - "{{BaseURL}}/includes/.gitignore" + + matchers-condition: and + matchers: + - type: status + status: + - 200 + + - type: dsl + dsl: + - '!contains(tolower(body), "