Create pubspec-config.yaml

patch-1
Dhiyaneshwaran 2022-08-10 07:26:32 +05:30 committed by GitHub
parent 32100c6b22
commit ae183d8057
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 29 additions and 0 deletions

View File

@ -0,0 +1,29 @@
id: pubspec-config
info:
name: Pubspec YAML Configuration File Exposure
author: DhiyaneshDk
severity: low
metadata:
verified: true
shodan-query: html:"pubspec.yaml"
tags: exposure,devops,pubsec,config,cicd
requests:
- method: GET
path:
- "{{BaseURL}}/pubspec.yaml"
- "{{BaseURL}}/assets/pubspec.yaml"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "version:"
- "environment:"
- "dependencies:"
- type: status
status:
- 200