Create netrc.yaml

miscellaneous/netrc.yaml

@@ -0,0 +1,34 @@
+id: netrc
+
+info:
+  name: .netrc file
+  author: geeknik
+  description: The .netrc file contains login and initialization information used by the auto-login process.
+  reference: https://www.gnu.org/software/inetutils/manual/html_node/The-_002enetrc-file.html
+  severity: high
+  tags: netrc,login
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/.netrc"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: regex
+        regex:
+          - "machine [0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?(?:\\.[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?)*\\.?"
+      - type: word
+        words:
+          - "login "
+          - "password "
+        condition: and
+
+    extractors:
+      - type: regex
+        part: body
+        regex:
+          - "machine [0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?(?:\\.[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?)*\\.?"