Create wget-hsts-list-exposure.yaml

2022-07-09 23:52:00 +01:00 · 2022-07-09 23:52:00 +01:00 · b8341c046f
parent 409b6727a8
commit b8341c046f
1 changed files with 30 additions and 0 deletions
--- a/exposures/files/wget-hsts-list-exposure.yaml
+++ b/exposures/files/wget-hsts-list-exposure.yaml
@ -0,0 +1,30 @@
+id: wget-hsts-list-exposure
+
+info:
+  name: WGET HSTS List Exposure
+  author: DhiyaneshDK
+  severity: low
+  metadata:
+    verified: true
+    shodan-query: html:".wget-hsts"
+  tags: devops,exposure
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/.wget-hsts"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - 'HSTS 1.0 Known Hosts database for GNU Wget'
+
+      - type: word
+        part: header
+        words:
+          - 'application/octet-stream'
+
+      - type: status
+        status:
+          - 200