diff --git a/http/misconfiguration/less-history.yaml b/http/misconfiguration/less-history.yaml new file mode 100644 index 0000000000..0263a22199 --- /dev/null +++ b/http/misconfiguration/less-history.yaml @@ -0,0 +1,42 @@ +id: lesshst-history + +info: + name: Less History - File Disclosure + author: kazet + severity: low + description: | + LESSHST file is a Less History File. LESSHST file is a Less History File. Less is a terminal pager program on Unix, Windows, and Unix-like systems used to view (but not change) the contents of a text file one screen at a time. + metadata: + max-request: 1 + shodan-query: html:"lesshst" + verified: true + tags: misconfig,disclosure,config,files + +http: + - method: GET + max-redirects: 1 + path: + - "{{BaseURL}}/.lesshst" + + matchers-condition: and + matchers: + - type: word + words: + - ".less-history-file:" + + - type: word + part: response + words: + - "" + - "text/html" + - "image/" + negative: true + + - type: status + status: + - 200