From 73b25a386f262b28335d63bebebc866096b7cb32 Mon Sep 17 00:00:00 2001 From: Geeknik Labs <466878+geeknik@users.noreply.github.com> Date: Thu, 1 Apr 2021 23:04:42 +0000 Subject: [PATCH 1/2] Create netrc.yaml --- miscellaneous/netrc.yaml | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 miscellaneous/netrc.yaml diff --git a/miscellaneous/netrc.yaml b/miscellaneous/netrc.yaml new file mode 100644 index 0000000000..7e1d10d243 --- /dev/null +++ b/miscellaneous/netrc.yaml @@ -0,0 +1,34 @@ +id: netrc + +info: + name: .netrc file + author: geeknik + description: The .netrc file contains login and initialization information used by the auto-login process. + reference: https://www.gnu.org/software/inetutils/manual/html_node/The-_002enetrc-file.html + severity: high + tags: netrc,login + +requests: + - method: GET + path: + - "{{BaseURL}}/.netrc" + + matchers-condition: and + matchers: + - type: status + status: + - 200 + - type: regex + regex: + - "machine [0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?(?:\\.[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?)*\\.?" + - type: word + words: + - "login " + - "password " + condition: and + + extractors: + - type: regex + part: body + regex: + - "machine [0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?(?:\\.[0-9A-Za-z](?:(?:[0-9A-Za-z]|-){0,61}[0-9A-Za-z])?)*\\.?" From b48c9e865c97a4dad13ba2a8ae5e8eae92c7cbcb Mon Sep 17 00:00:00 2001 From: sandeep <8293321+ehsandeep@users.noreply.github.com> Date: Fri, 2 Apr 2021 15:17:55 +0530 Subject: [PATCH 2/2] moving files around --- {miscellaneous => exposures/configs}/netrc.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename {miscellaneous => exposures/configs}/netrc.yaml (95%) diff --git a/miscellaneous/netrc.yaml b/exposures/configs/netrc.yaml similarity index 95% rename from miscellaneous/netrc.yaml rename to exposures/configs/netrc.yaml index 7e1d10d243..1c868fcd85 100644 --- a/miscellaneous/netrc.yaml +++ b/exposures/configs/netrc.yaml @@ -1,12 +1,12 @@ id: netrc info: - name: .netrc file + name: netrc config file author: geeknik description: The .netrc file contains login and initialization information used by the auto-login process. reference: https://www.gnu.org/software/inetutils/manual/html_node/The-_002enetrc-file.html severity: high - tags: netrc,login + tags: netrc,config requests: - method: GET