Merge pull request #4578 from DhiyaneshGeek/master

Config, File Exposure
patch-1
Prince Chaddha 2022-06-15 12:38:07 +05:30 committed by GitHub
commit 7affcc4dd7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 69 additions and 0 deletions

View File

@ -0,0 +1,35 @@
id: editor-exposure
info:
name: Editor Config Exposure
author: DhiyaneshDk
severity: low
metadata:
verified: true
shodan-query: html:"editorconfig"
tags: config,exposure
requests:
- method: GET
path:
- "{{BaseURL}}/.editorconfig"
matchers-condition: and
matchers:
- type: word
words:
- "= true"
- "= space"
condition: or
- type: word
part: header
words:
- "application/json"
- "text/html"
negative: true
condition: or
- type: status
status:
- 200

View File

@ -0,0 +1,34 @@
id: vagrantfile-exposure
info:
name: Vagrantfile Exposure
author: DhiyaneshDk
severity: low
metadata:
verified: true
shodan-query: html:"Vagrantfile"
tags: config,exposure,vagrant,oss
requests:
- method: GET
path:
- "{{BaseURL}}/Vagrantfile"
matchers-condition: and
matchers:
- type: word
words:
- "./vagrant/config/vagrant-local.yml"
- "./vagrant/config/vagrant-local.example.yml"
- type: word
part: header
words:
- "application/json"
- "text/html"
negative: true
condition: or
- type: status
status:
- 200