diff --git a/http/misconfiguration/less-history.yaml b/http/misconfiguration/less-history.yaml new file mode 100644 index 0000000000..fe1e9330f8 --- /dev/null +++ b/http/misconfiguration/less-history.yaml @@ -0,0 +1,39 @@ +id: less-history + +info: + name: Less History + author: kazet + severity: low + description: Discover history for less + metadata: + max-request: 1 + tags: misconfig + +http: + - method: GET + max-redirects: 1 + path: + - "{{BaseURL}}/.lesshst" + + matchers-condition: and + matchers: + - type: word + words: + - ".less-history-file:" + + - type: word + part: response + words: + - "" + - "text/html" + - "image/" + negative: true + + - type: status + status: + - 200