Update putty-private-key-disclosure.yaml

patch-1
Dhiyaneshwaran 2022-12-02 12:50:22 +05:30 committed by GitHub
parent 6242d0d126
commit e09bb5d478
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 1 deletions

View File

@ -2,16 +2,26 @@ id: putty-private-key-disclosure
info:
name: Putty Private Key Disclosure
author: dhiyaneshDk
author: DhiyaneshDk,geeknik
severity: medium
reference:
- https://github.com/detectify/ugly-duckling/blob/master/modules/crowdsourced/putty-private-key-disclosure.json
metadata:
verified: true
github-query: filename:putty.ppk
tags: exposure,files
requests:
- method: GET
path:
- "{{BaseURL}}/my.ppk"
- "{{BaseURL}}/putty.ppk"
- "{{BaseURL}}/{{Hostname}}.ppk"
- "{{BaseURL}}/.ssh/putty.ppk"
- "{{BaseURL}}/.ssh/{{Hostname}}.ppk"
- "{{BaseURL}}/.putty/my.ppk"
- "{{BaseURL}}/.putty/putty.ppk"
- "{{BaseURL}}/.putty/{{Hostname}}.ppk"
matchers-condition: and
matchers: