Create svn-wc-db.yaml

patch-1
Hardik Solanki 2022-12-10 13:52:24 +00:00 committed by GitHub
parent 9902c4d33a
commit 9a62683e6f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 31 additions and 0 deletions

View File

@ -0,0 +1,31 @@
id: svn-wc-db
info:
name: SVN wc.db File Exposure
author: Hardik-Solanki
severity: medium
metadata:
verified: true
google-query: intitle:"index of" "wc.db"
reference:
- https://github.com/maurosoria/dirsearch/blob/master/db/dicc.txt
- https://github.com/rapid7/metasploit-framework/blob/master//modules/auxiliary/scanner/http/svn_wcdb_scanner.rb
tags: exposure,svn,config
requests:
- method: GET
path:
- "{{BaseURL}}/.svn/wc.db"
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'SQLite format'
- 'WCROOT'
condition: and
- type: status
status:
- 200