Create joomla-config-file.yaml

2021-03-04 13:00:06 -03:00 · 2021-03-04 13:00:06 -03:00 · e71bba4cf4
parent b7aba7f7ac
commit e71bba4cf4
1 changed files with 30 additions and 0 deletions
--- a/exposures/files/joomla-config-file.yaml
+++ b/exposures/files/joomla-config-file.yaml
@ -0,0 +1,30 @@
+id: joomla-config-dist-file
+
+info:
+  name: Joomla Config Dist File
+  author: oppsec
+  severity: low
+  description: configuration.php-dist is a file created by Joomla to save Joomla settings.
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/configuration.php-dist"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "Joomla"
+          - "JConfig"
+          - "@package"
+        condition: and
+
+      - type: word
+        words:
+          - "text/plain"
+        part: header
+
+      - type: status
+        status:
+          - 200