diff --git a/http/exposures/files/azuredeploy-json.yaml b/http/exposures/files/azuredeploy-json.yaml new file mode 100644 index 0000000000..f9303e3e6b --- /dev/null +++ b/http/exposures/files/azuredeploy-json.yaml @@ -0,0 +1,38 @@ +id: azuredeploy-json + +info: + name: Azure Resource Manager Template - File Exposure + author: DhiyaneshDk + severity: medium + reference: + - https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/parameter-files + - https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-use-template-reference?tabs=CLI + metadata: + verified: true + max-request: 1 + fofa-query: body="azuredeploy.json" + tags: azure,exposure,files + +http: + - method: GET + path: + - "{{BaseURL}}/azuredeploy.json" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - '"$schema":' + - '"contentVersion":' + - '"parameters":' + condition: and + + - type: word + part: header + words: + - "application/json" + + - type: status + status: + - 200