tags + additional string match

patch-1
sandeep 2021-06-06 14:14:01 +05:30
parent f01abd3e6d
commit 9b3c3ec7a0
1 changed files with 6 additions and 6 deletions

View File

@ -4,22 +4,22 @@ info:
name: Ruby-on-Rails Database Configuration Exposure
author: pdteam & geeknik
severity: low
tags: config,exposure
tags: config,exposure,rails
requests:
- method: GET
path:
- "{{BaseURL}}/config/database.yml"
matchers-condition: and
matchers:
- type: word
part: header
words:
- "application/octet-stream"
- type: word
words:
- "adapter:"
- "database:"
- "production:"
condition: and
part: body
- type: status
status:
- 200