From e71bba4cf47f2a28e833c5324d36fdeb19ba56a9 Mon Sep 17 00:00:00 2001 From: oppsec <50470310+oppsec@users.noreply.github.com> Date: Thu, 4 Mar 2021 13:00:06 -0300 Subject: [PATCH 1/2] Create joomla-config-file.yaml --- exposures/files/joomla-config-file.yaml | 30 +++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 exposures/files/joomla-config-file.yaml diff --git a/exposures/files/joomla-config-file.yaml b/exposures/files/joomla-config-file.yaml new file mode 100644 index 0000000000..6ae2bbc14a --- /dev/null +++ b/exposures/files/joomla-config-file.yaml @@ -0,0 +1,30 @@ +id: joomla-config-dist-file + +info: + name: Joomla Config Dist File + author: oppsec + severity: low + description: configuration.php-dist is a file created by Joomla to save Joomla settings. + +requests: + - method: GET + path: + - "{{BaseURL}}/configuration.php-dist" + + matchers-condition: and + matchers: + - type: word + words: + - "Joomla" + - "JConfig" + - "@package" + condition: and + + - type: word + words: + - "text/plain" + part: header + + - type: status + status: + - 200 From 06f67cdbfca701a4b8275c9325b9486264522f60 Mon Sep 17 00:00:00 2001 From: sandeep <8293321+ehsandeep@users.noreply.github.com> Date: Thu, 4 Mar 2021 22:29:42 +0530 Subject: [PATCH 2/2] moving files around --- exposures/{files => configs}/joomla-config-file.yaml | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename exposures/{files => configs}/joomla-config-file.yaml (100%) diff --git a/exposures/files/joomla-config-file.yaml b/exposures/configs/joomla-config-file.yaml similarity index 100% rename from exposures/files/joomla-config-file.yaml rename to exposures/configs/joomla-config-file.yaml