Update and rename misconfiguration/cloud-config.yaml to exposures/files/cloud-config.yaml

patch-1
Prince Chaddha 2022-07-05 09:47:31 +05:30 committed by GitHub
parent 635ddd8283
commit dbcbe89a23
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 5 deletions

View File

@ -1,18 +1,18 @@
id: cloud-config
info:
name: Cloud Config Yaml File Disclosure
name: Cloud Config Yaml - File Disclosure
author: DhiyaneshDK
severity: Medium
severity: medium
reference: https://www.exploit-db.com/ghdb/7959
metadata:
shodan-query: html:"cloud-config.yml"
tags: misconfig,cloud,devops
tags: exposure,cloud,devops
requests:
- method: GET
path:
- "{{BaseURL}}/cloud-config.yml "
- "{{BaseURL}}/cloud-config.yml"
- "{{BaseURL}}/core-cloud-config.yml"
stop-at-first-match: true
@ -21,7 +21,8 @@ requests:
- type: word
words:
- 'ssh_authorized_keys'
- 'hostname'
- '#cloud-config'
condition: and
- type: status
status: