Create sql-dump.yaml

A generic search for mysql dump or backup files.
patch-1
Geeknik Labs 2020-09-04 22:38:46 +00:00 committed by GitHub
parent ff76d6a1c8
commit 9bd62e6922
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 35 additions and 0 deletions

35
files/sql-dump.yaml Normal file
View File

@ -0,0 +1,35 @@
id: sql-dump
info:
name: MySQL Dump
author: geeknik
severity: medium
requests:
- method: GET
path:
- "{{BaseURL}}/{{Hostname}}.sql"
- "{{BaseURL}}/1.sql"
- "{{BaseURL}}/backup.sql"
- "{{BaseURL}}/data.sql"
- "{{BaseURL}}/database.sql"
- "{{BaseURL}}/db_backup.sql"
- "{{BaseURL}}/dbdump.sql"
- "{{BaseURL}}/db.sql"
- "{{BaseURL}}/dump.sql"
- "{{BaseURL}}/localhost.sql"
- "{{BaseURL}}/mysql.sql"
- "{{BaseURL}}/site.sql"
- "{{BaseURL}}/sql.sql"
- "{{BaseURL}}/temp.sql"
- "{{BaseURL}}/users.sql"
- "{{BaseURL}}/translate.sql"
- "{{BaseURL}}/mysqldump.sql"
matchers:
- type: word
words:
- "INSERT INTO"
- type: status
status:
- 200