added additional matcher , proper description , accurate shodan query, change of directory

patch-1
Dhiyaneshwaran 2023-03-16 07:48:24 +05:30 committed by GitHub
parent 8801533b28
commit dde6da4862
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 31 additions and 28 deletions

View File

@ -1,28 +0,0 @@
id: everything-server-exposure
info:
name: Everything Server Exposure
author: pussycat0x
severity: high
description: |
An HTTP server is software that understands URLs (web addresses) and HTTP (the protocol your browser uses to view webpages).
An HTTP server can be accessed through the domain names of the websites it stores, and it delivers the content of these hosted websites to the end user's device
reference:
- https://www.voidtools.com/
metadata:
verified: 'true'
shodan-query: 'Server:"Everything HTTP Server"'
tags: everything,exposure
requests:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
words:
- "<title>Everything"
- "indexof"
condition: and

View File

@ -0,0 +1,31 @@
id: everything-listing
info:
name: Everything Server Exposure
author: pussycat0x
severity: high
description: |
Everything is a freeware desktop search utility for Windows that can rapidly find files and folders by name.
reference:
- https://www.voidtools.com/
metadata:
verified: 'true'
shodan-query: http.favicon.hash:-977323269
tags: exposure,everything,listing,voidtools
requests:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
words:
- "<title>Everything</title>"
- "indexof"
condition: and
- type: status
status:
- 200