Create sym404.yaml

vulnerabilities/wordpress/sym404.yaml

@@ -0,0 +1,31 @@
+id: sym404
+
+info:
+  name: sym404
+  author: pussycat0x
+  severity: high
+  description: Searches for sensitive directories present in the sym404.
+  tags: wordpress,listing
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/wp-includes/sym404/"
+      - "{{BaseURL}}//wp-includes/sym404/root/"
+      - "{{BaseURL}}/old/configs/sym404/"
+      - "{{BaseURL}}/wp-admin/folder/sym404/"
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "Index of"
+      - type: word
+        words:
+          - "/wp-content/plugins/"
+          - "/wp-includes/ALFA_DATA/"
+          - "/ALFA_DATA/alfacgiapi/"
+          - "/cgi-bin/ALFA_DATA/alfacgiapi/"
+        condition: or
+      - type: status
+        status:
+          - 200