Add missing-x-content-type-options

miscellaneous/missing-x-content-type-options.yaml

@@ -0,0 +1,18 @@
+id: missing-x-content-type-options
+
+info:
+  name: X-Content-Type-Options unidentified
+  author: G4L1T0 and @convisoappsec
+  severity: info
+  description: Check for X-Content-Type-Options header
+  tags: misc
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}'
+    redirects: true
+    matchers:
+      - type: dsl
+        dsl:
+          - '!contains(tolower(all_headers), ''x-content-type-options'')'