Enhancement: misconfiguration/s3-torrent.yaml by md
parent
6f9fe1e8d6
commit
d86aa14327
|
@ -1,10 +1,14 @@
|
||||||
id: s3-torrent
|
id: s3-torrent
|
||||||
|
|
||||||
info:
|
info:
|
||||||
name: S3 torrent Downloads Allowed
|
name: Amazon S3 Torrent Download - Detect
|
||||||
author: ambassify
|
author: ambassify
|
||||||
severity: info
|
severity: info
|
||||||
description: Detects if endpoint allows magic S3 torrent argument to download files
|
description: Amazon S3 Torrent download was detected, which can allow a malicious user to download files.
|
||||||
|
classification:
|
||||||
|
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
|
||||||
|
cvss-score: 0.0
|
||||||
|
cwe-id: CWE-200
|
||||||
tags: misconfig,aws,s3,bucket
|
tags: misconfig,aws,s3,bucket
|
||||||
|
|
||||||
requests:
|
requests:
|
||||||
|
@ -19,3 +23,5 @@ requests:
|
||||||
- 'RequestTorrentOfBucketError'
|
- 'RequestTorrentOfBucketError'
|
||||||
- 's3-tracker'
|
- 's3-tracker'
|
||||||
condition: or
|
condition: or
|
||||||
|
|
||||||
|
# Enhanced by md on 2023/02/06
|
||||||
|
|
Loading…
Reference in New Issue