From 9b3c3ec7a08c9e52841ea22b0979d18d9bc28f22 Mon Sep 17 00:00:00 2001 From: sandeep <8293321+ehsandeep@users.noreply.github.com> Date: Sun, 6 Jun 2021 14:14:01 +0530 Subject: [PATCH] tags + additional string match --- exposures/configs/rails-database-config.yaml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/exposures/configs/rails-database-config.yaml b/exposures/configs/rails-database-config.yaml index 2d5d89bfef..7e0969a7c2 100644 --- a/exposures/configs/rails-database-config.yaml +++ b/exposures/configs/rails-database-config.yaml @@ -4,22 +4,22 @@ info: name: Ruby-on-Rails Database Configuration Exposure author: pdteam & geeknik severity: low - tags: config,exposure + tags: config,exposure,rails requests: - method: GET path: - "{{BaseURL}}/config/database.yml" - matchers-condition: and matchers: - - type: word - part: header - words: - - "application/octet-stream" - type: word words: - "adapter:" - "database:" + - "production:" condition: and part: body + + - type: status + status: + - 200 \ No newline at end of file