From 4b0a3b14dd45b24a60020170c287fabad266e953 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Thu, 15 Dec 2022 01:04:06 +0530 Subject: [PATCH 1/3] Create websheets-config.yaml --- exposures/configs/websheets-config.yaml | 28 +++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 exposures/configs/websheets-config.yaml diff --git a/exposures/configs/websheets-config.yaml b/exposures/configs/websheets-config.yaml new file mode 100644 index 0000000000..348419cabd --- /dev/null +++ b/exposures/configs/websheets-config.yaml @@ -0,0 +1,28 @@ +id: websheets-config + +info: + name: Websheets Config File Exposure + author: geeknik + severity: low + reference: + - https://github.com/daveagp/websheets + tags: websheets,config,exposure,files + +requests: + - method: GET + path: + - '{{BaseURL}}/ws-config.json' + - '{{BaseURL}}/ws-config.example.json' + + stop-at-first-match: true + matchers-condition: and + matchers: + - type: word + words: + - '"db-password":' + - '"db-database":' + condition: and + + - type: status + status: + - 200 From 33d282bdb392e905e2c532a21207430d2f745e5b Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Fri, 16 Dec 2022 08:08:07 +0530 Subject: [PATCH 3/3] Update websheets-config.yaml --- exposures/configs/websheets-config.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/exposures/configs/websheets-config.yaml b/exposures/configs/websheets-config.yaml index 348419cabd..5c56d3f69c 100644 --- a/exposures/configs/websheets-config.yaml +++ b/exposures/configs/websheets-config.yaml @@ -6,6 +6,8 @@ info: severity: low reference: - https://github.com/daveagp/websheets + metadata: + verified: true tags: websheets,config,exposure,files requests: