Add Gruntfile Expose Test

Gruntfile can include secrets or other information that helps find
further vulnerabilities.
patch-1
Sufijen Bani 2021-10-20 18:28:48 +02:00
parent 6f2e88034d
commit 9ded2fcccf
1 changed files with 27 additions and 0 deletions

View File

@ -0,0 +1,27 @@
id: gruntfile
info:
name: gruntfile exposure
author: sbani
severity: info
reference: https://gruntjs.com/sample-gruntfile
tags: config,exposure
requests:
- method: GET
redirects: true
max-redirects: 3
path:
- "{{BaseURL}}/Gruntfile.js"
- "{{BaseURL}}/Gruntfile.coffee"
matchers-condition: and
matchers:
- type: word
words:
- "module.exports"
part: body
- type: status
status:
- 200