diff --git a/exposures/configs/phpsec-config.yaml b/exposures/configs/phpsec-config.yaml new file mode 100644 index 0000000000..75bf61c005 --- /dev/null +++ b/exposures/configs/phpsec-config.yaml @@ -0,0 +1,31 @@ +id: phpsec-config + +info: + name: Phpspec Configuration File Exposure + author: DhiyaneshDK + severity: info + metadata: + verified: true + shodan-query: html:"phpspec.yml" + reference: https://phpspec.net/en/stable/cookbook/configuration.html + tags: exposure,phpsec,php,devops,cicd + +requests: + - method: GET + path: + - "{{BaseURL}}/.phpspec.yml" + - "{{BaseURL}}/phpspec.yml" + + stop-at-first-match: true + matchers-condition: and + matchers: + - type: word + words: + - 'suites:' + - 'main:' + - 'namespace:' + condition: and + + - type: status + status: + - 200