Merge pull request #6396 from davtur19/patch-1

Add reference to docker-registry
patch-1
Ritik Chaddha 2022-12-20 19:40:59 +05:30 committed by GitHub
commit 7fbb859bdc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 2 deletions

View File

@ -4,20 +4,25 @@ info:
name: Docker Registry Listing
author: puzzlepeaches
severity: medium
tags: docker,devops
reference:
- https://notsosecure.com/anatomy-of-a-hack-docker-registry
tags: misconfig,docker,devops
requests:
- method: GET
path:
- "{{BaseURL}}/v2/_catalog"
host-redirects: true
max-redirects: 1
matchers-condition: and
matchers:
- type: word
part: body
words:
- '"repositories":'
- type: word
part: header
words:
- "application/json"
part: header