updated matcher

patch-1
Ritik Chaddha 2023-06-14 22:32:10 +05:30 committed by GitHub
parent cddcf8c8c1
commit adbd551d44
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 6 deletions

View File

@ -10,9 +10,7 @@ info:
cvss-score: 9.4
cwe-id: CWE-200
reference: https://aws.amazon.com/blogs/security/what-to-do-if-you-inadvertently-expose-an-aws-access-key/
tags: config,exposure
metadata:
max-request: 1
tags: config,exposure,aws,credential
http:
- method: GET
@ -21,9 +19,9 @@ http:
matchers-condition: and
matchers:
- type: word
words:
- "aws_access_key_id"
- type: regex
regex:
- 'aws_access_key_id\s*=\s*'
- type: dsl
dsl:
@ -34,6 +32,7 @@ http:
- type: status
status:
- 200
extractors:
- type: regex
part: body