Add jetbrains datasource exposure check

2021-10-20 19:07:25 +02:00 · 2021-10-20 19:07:25 +02:00 · ecdb28d826
parent 6f2e88034d
commit ecdb28d826
1 changed files with 24 additions and 0 deletions
--- a/exposures/configs/jetbrains-datasources.yaml
+++ b/exposures/configs/jetbrains-datasources.yaml
@ -0,0 +1,24 @@
+id: package-json
+
+info:
+  name: Jetbrains IDE DataSources exposure
+  author: FlorianMaak
+  severity: info
+  description: Contains uuid of datasource to retrieve via .idea/dataSources/{uuid}.xml to expose database structure.
+  tags: config,exposure
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/.idea/dataSources.xml"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "uuid"
+        part: body
+
+      - type: status
+        status:
+          - 200