Create rakefile-disclosure.yaml

http/exposures/configs/rakefile-disclosure.yaml

@@ -0,0 +1,38 @@
+id: rakefile-disclosure
+
+info:
+  name: Rakefile - File Disclosure
+  author: DhiyaneshDK
+  severity: low
+  description: |
+    Rakefile configuration file was detected.
+  reference:
+    - https://ruby.github.io/rake/doc/rakefile_rdoc.html
+  metadata:
+    max-request: 1
+    verified: true
+    shodan-query: html:"Rakefile"
+  tags: devops,exposure,rakefile,config,ruby,rails
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/Rakefile"
+
+    matchers-condition: or
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'application.load_tasks'
+          - 'config/application'
+        condition: and
+        case-insensitive: true
+
+      - type: word
+        part: body
+        words:
+          - 'require'
+          - 'desc'
+          - 'task :'
+        condition: and