Added Git Logs

exposures/configs/git-config.yaml

@@ -0,0 +1,48 @@
+id: git-config
+
+info:
+  name: Git Config Disclosure
+  author: pdteam,pikpikcu,Mah3Sec_
+  severity: medium
+  description: Searches for the pattern /.git/config and log file on passed URLs.
+  tags: config,git,exposure
+
+requests:
+  - raw:
+      - |
+        GET /.git/config HTTP/1.1
+        Host: {{Hostname}}
+        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0
+        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
+        Accept-Language: en-US,en;q=0.5
+        Content-Type: application/x-www-form-urlencoded
+        Content-Length: 1
+        Connection: close
+
+      - |
+        GET /.git/logs/HEAD HTTP/1.1
+        Host: {{Hostname}}
+        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0
+        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
+        Accept-Language: en-US,en;q=0.5
+        Content-Type: application/x-www-form-urlencoded
+        Content-Length: 1
+        Connection: close
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "[core]"
+          - "root"
+        condition: or
+
+      - type: dsl
+        dsl:
+          - "!contains(tolower(body), '<html')"
+          - "!contains(tolower(body), '<body')"
+        condition: and
+
+      - type: status
+        status:
+          - 200

git-logs

@@ -1,29 +0,0 @@
-id: git-logs
-
-info:
-  name: Git Logs Disclosure
-  author: Mahendra Purbia (Mah3Sec_)
-  severity: medium
-  description: Searches for the pattern /.git/logs/HEAD on passed URLs.
-  tags: logs,git,exposure
-
-requests:
-  - raw:
-      - |
-        GET /.git/logs/HEAD HTTP/1.1
-        Host: {{Hostname}}
-        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0
-        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
-        Accept-Language: en-US,en;q=0.5
-        Content-Type: application/x-www-form-urlencoded
-        Content-Length: 1
-        Connection: close
-    matchers-condition: and
-    matchers:
-      - type: word
-        words:
-          - "root"
-
-      - type: dsl
-        dsl:
-          - 'contains(tolower(body), "<html") == false && contains(tolower(body), "</body>") == false'