Add detection template for webpack config files (#4218)

* Add detection template for webpack config files

* minor matcher update

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
patch-1
Wim Mostmans 2022-04-24 12:32:27 +02:00 committed by GitHub
parent 589708ef53
commit 68bff41e27
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 34 additions and 0 deletions

View File

@ -0,0 +1,34 @@
id: webpack-config
info:
name: webpack config disclosure
author: ambassify
severity: info
description: A lot of web projects use webpack these days to bundle their project to publish it online - this file holds various metadata relevant to the project.
metadata:
shodan-query: html:"webpack.config.js"
tags: config,exposure
requests:
- method: GET
path:
- "{{BaseURL}}/webpack.config.js"
matchers-condition: and
matchers:
- type: word
words:
- "module.exports"
- "const"
condition: or
- type: word
part: header
words:
- "application/javascript"
- "text/javascript"
condition: or
- type: status
status:
- 200