Merge pull request #2394 from gabrielb3lmont/exposures_templates

Added crossdomain-xml Template
patch-1
Prince Chaddha 2021-08-14 15:46:53 +05:30 committed by GitHub
commit 739622c7ab
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 23 additions and 0 deletions

View File

@ -0,0 +1,23 @@
id: insecure-crossdomain
info:
name: Insecure cross-domain.xml file
author: Borna Nematzadeh,nadino
severity: info
reference: https://www.acunetix.com/vulnerabilities/web/insecure-crossdomain-xml-file
tags: exposure,generic
requests:
- method: GET
path:
- "{{BaseURL}}/crossdomain.xml"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: body
words:
- '<allow-access-from domain="*"/>'