diff --git a/exposures/configs/joomla-config-file.yaml b/exposures/configs/joomla-config-file.yaml new file mode 100644 index 0000000000..6ae2bbc14a --- /dev/null +++ b/exposures/configs/joomla-config-file.yaml @@ -0,0 +1,30 @@ +id: joomla-config-dist-file + +info: + name: Joomla Config Dist File + author: oppsec + severity: low + description: configuration.php-dist is a file created by Joomla to save Joomla settings. + +requests: + - method: GET + path: + - "{{BaseURL}}/configuration.php-dist" + + matchers-condition: and + matchers: + - type: word + words: + - "Joomla" + - "JConfig" + - "@package" + condition: and + + - type: word + words: + - "text/plain" + part: header + + - type: status + status: + - 200