diff --git a/README.md b/README.md index 8a03b1ecd3..c10f7c556f 100644 --- a/README.md +++ b/README.md @@ -37,13 +37,10 @@ An overview of the nuclei template directory including number of templates assoc | Templates | Counts | Templates | Counts | Templates | Counts | | -------------- | ------------------------------ | --------------- | ------------------------------- | ---------------- | ------------------------------ | -| cves | 200 | vulnerabilities | 92 | exposed-panels | 74 | -| exposures | 47 | technologies | 46 | misconfiguration | 43 | | workflows | 21 | miscellaneous | 12 | default-logins | 10 | | exposed-tokens | 9 | dns | 6 | fuzzing | 4 | | helpers | 2 | takeovers | 1 | - | - | -**61 directories, 576 files**. diff --git a/exposures/configs/sftp-credentials-exposure.yaml b/exposures/configs/sftp-credentials-exposure.yaml new file mode 100644 index 0000000000..51586f91ad --- /dev/null +++ b/exposures/configs/sftp-credentials-exposure.yaml @@ -0,0 +1,24 @@ +id: sftp-credentials-exposure + +info: + name: SFTP credentials exposure + author: sheikhrishad + severity: medium + tags: config,ftp + +requests: + - method: GET + path: + - "{{BaseURL}}/sftp-config.json" + + matchers-condition: and + matchers: + - type: word + words: + - "file_permissions" + - "extra_list_connections" + condition: and + + - type: status + status: + - 200 \ No newline at end of file