From 38b0633dd255a6f0fc893827ca7806fae31d3a4a Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Tue, 10 Oct 2023 13:46:57 +0530 Subject: [PATCH 1/2] Create protractor-config.yaml --- http/exposures/configs/protractor-config.yaml | 42 +++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 http/exposures/configs/protractor-config.yaml diff --git a/http/exposures/configs/protractor-config.yaml b/http/exposures/configs/protractor-config.yaml new file mode 100644 index 0000000000..c9b7cf06cb --- /dev/null +++ b/http/exposures/configs/protractor-config.yaml @@ -0,0 +1,42 @@ +id: protractor-config + +info: + name: Protractor Configuration Exposure - Detect + author: DhiyaneshDK + severity: low + description: | + Protractor configuration file was detected. + reference: + - https://www.protractortest.org/#/api-overview + classification: + cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cvss-score: 0.0 + cwe-id: CWE-200 + metadata: + max-request: 1 + verified: true + shodan-query: html:"protractor.conf.js" + tags: devops,exposure,protractor,config + +http: + - method: GET + path: + - "{{BaseURL}}/protractor.conf.js" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - 'exports.config' + - 'capabilities:' + condition: and + + - type: word + part: header + words: + - "application/javascript" + + - type: status + status: + - 200 From d52b09f3bbde549949c04c192554e48bbc1a1e2d Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Wed, 11 Oct 2023 14:27:06 +0530 Subject: [PATCH 2/2] Update protractor-config.yaml --- http/exposures/configs/protractor-config.yaml | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/http/exposures/configs/protractor-config.yaml b/http/exposures/configs/protractor-config.yaml index c9b7cf06cb..c836a033a3 100644 --- a/http/exposures/configs/protractor-config.yaml +++ b/http/exposures/configs/protractor-config.yaml @@ -1,17 +1,13 @@ id: protractor-config info: - name: Protractor Configuration Exposure - Detect + name: Protractor Configuration Exposure author: DhiyaneshDK severity: low description: | Protractor configuration file was detected. reference: - https://www.protractortest.org/#/api-overview - classification: - cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N - cvss-score: 0.0 - cwe-id: CWE-200 metadata: max-request: 1 verified: true