Update s3-torrent.yaml

2022-11-22 19:29:16 +05:30 · 2022-11-22 19:29:16 +05:30 · e732805c50
parent 04d6e4968b
commit e732805c50
1 changed files with 4 additions and 4 deletions
--- a/misconfiguration/s3-torrent.yaml
+++ b/misconfiguration/s3-torrent.yaml
@ -1,21 +1,21 @@
 id: s3-torrent

 info:
-  name: Detect S3 torrent downloads allowed
+  name: S3 torrent Downloads Allowed
  author: ambassify
  severity: info
  description: Detects if endpoint allows magic S3 torrent argument to download files
-  tags: aws,s3,bucket
+  tags: misconfig,aws,s3,bucket

 requests:
  - method: GET
    path:
      - "{{BaseURL}}/?torrent"

-    matchers-condition: and
    matchers:
      - type: word
+        part: body
        words:
          - 'RequestTorrentOfBucketError'
          - 's3-tracker'
-        part: body
+        condition: or