diff --git a/README.md b/README.md index a5d258488f..444656f365 100644 --- a/README.md +++ b/README.md @@ -39,12 +39,12 @@ An overview of the nuclei template directory including number of templates assoc | Templates | Counts | Templates | Counts | Templates | Counts | | ---------------- | ------------------------------ | --------------- | ------------------------------- | -------------- | ---------------------------- | | cves | 328 | vulnerabilities | 173 | exposed-panels | 145 | -| takeovers | 67 | exposures | 104 | technologies | 98 | +| takeovers | 67 | exposures | 105 | technologies | 98 | | misconfiguration | 65 | workflows | 32 | miscellaneous | 22 | | default-logins | 30 | exposed-tokens | 0 | dns | 9 | | fuzzing | 9 | helpers | 8 | iot | 12 | -**111 directories, 1200 files**. +**111 directories, 1201 files**. diff --git a/exposures/configs/zend-config-file.yaml b/exposures/configs/zend-config-file.yaml new file mode 100644 index 0000000000..8c3039bfeb --- /dev/null +++ b/exposures/configs/zend-config-file.yaml @@ -0,0 +1,27 @@ +id: zend-config-file + +info: + name: Zend Configuration File + author: pdteam + severity: high + tags: config,exposure,zend,php + +requests: + - method: GET + path: + - "{{BaseURL}}/application/configs/application.ini" + + matchers-condition: and + matchers: + - type: word + words: + - "resources.db.params.password" + + - type: word + words: + - "text/plain" + part: header + + - type: status + status: + - 200