Merge pull request #8779 from antoinet/main

Additional matcher for security.txt

http/miscellaneous/security-txt.yaml

@@ -4,12 +4,14 @@ info:
   name: security.txt File
   author: bad5ect0r,noraj
   severity: info
-  description: File similar to robots.txt but intended to be read by humans wishing to contact a website’s owner about security issues. Often defines a security policy and contact details.
+  description: |
+    File similar to robots.txt but intended to be read by humans wishing to contact a website’s owner about security issues. Often defines a security policy and contact details.
   reference:
     - https://securitytxt.org/
     - https://community.turgensec.com/security-txt-progress-in-ethical-security-research/
   metadata:
     max-request: 2
+    verified: true
     shodan-query: http.securitytxt:contact http.status:200
   tags: misc,generic
 
@@ -20,26 +22,27 @@ http:
       - "{{RootURL}}/security.txt"
 
     stop-at-first-match: true
-    host-redirects: true
+    redirects: true
     max-redirects: 2
-
     matchers-condition: and
     matchers:
-      - type: status
-        status:
-          - 200
-
       - type: word
         words:
           - "Contact:"
+          - "Expires:"
+        condition: or
 
       - type: dsl
         dsl:
           - "len(body) <= 4096 && len(body) > 0"
 
+      - type: status
+        status:
+          - 200
+
     extractors:
       - type: regex
         group: 1
         regex:
           - '(?mi)Contact:(.*)'
-# digest: 490a0046304402204191256ec14c84d855e710c89cf93e8d4d14036471145f075d5670c07de11450022075a0d9c2197ca8bd6d62b524ed8c8a72ca2fc61d60fc8a3ef0b6e2bdda410549:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204191256ec14c84d855e710c89cf93e8d4d14036471145f075d5670c07de11450022075a0d9c2197ca8bd6d62b524ed8c8a72ca2fc61d60fc8a3ef0b6e2bdda410549:922c64590222798bb761d5b6d8e72950