daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update url-extension-inspector.yaml (avoid false positive) 

This commit correct some false positive in this template to avoid many invalid results.
patch-1
m ayadi 2023-10-24 15:10:38 +01:00 committed by GitHub
parent 61935761d4
commit fb522f89a3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 49 additions and 49 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

98
file/url-analyse/url-extension-inspector.yaml
View File

@ -22,227 +22,227 @@ file:
- type: regex - type: regex
name: Backup file name: Backup file
regex: regex:
- "(?i)(\\.bak|\\.backup|\\.bkp|\\._bkp|\\.bk|\\.BAK)" - "(?i)(\\.bak|\\.backup|\\.bkp|\\._bkp|\\.bk|\\.BAK)('|\")"
- type: regex - type: regex
name: PHP Source name: PHP Source
regex: regex:
- "(?i)(\\.php)(\\.~|\\.bk|\\.bak|\\.bkp|\\.BAK|\\.swp|\\.swo|\\.swn|\\.tmp|\\.save|\\.old|\\.new|\\.orig|\\.dist|\\.txt|\\.disabled|\\.original|\\.backup|\\._back|\\._1\\.bak|~|!|\\.0|\\.1|\\.2|\\.3)" - "(?i)(\\.php)(\\.~|\\.bk|\\.bak|\\.bkp|\\.BAK|\\.swp|\\.swo|\\.swn|\\.tmp|\\.save|\\.old|\\.new|\\.orig|\\.dist|\\.txt|\\.disabled|\\.original|\\.backup|\\._back|\\._1\\.bak|~|!|\\.0|\\.1|\\.2|\\.3)('|\")"
- type: regex - type: regex
name: ASP Source name: ASP Source
regex: regex:
- "(?i)(\\.asp)(\\.~|\\.bk|\\.bak|\\.bkp|\\.BAK|\\.swp|\\.swo|\\.swn|\\.tmp|\\.save|\\.old|\\.new|\\.orig|\\.dist|\\.txt|\\.disabled|\\.original|\\.backup|\\._back|\\._1\\.bak|~|!|\\.0|\\.1|\\.2|\\.3)" - "(?i)(\\.asp)(\\.~|\\.bk|\\.bak|\\.bkp|\\.BAK|\\.swp|\\.swo|\\.swn|\\.tmp|\\.save|\\.old|\\.new|\\.orig|\\.dist|\\.txt|\\.disabled|\\.original|\\.backup|\\._back|\\._1\\.bak|~|!|\\.0|\\.1|\\.2|\\.3)('|\")"
- type: regex - type: regex
name: Database file name: Database file
regex: regex:
- "(?i)\\.db|\\.sql" - "(?i)\\.db|\\.sql('|\")"
- type: regex - type: regex
name: Bash script name: Bash script
regex: regex:
- "(?i)\\.sh|\\.bashrc|\\.zshrc" - "(?i)(\\.sh|\\.bashrc|\\.zshrc)('|\")"
- type: regex - type: regex
name: 1Password password manager database file name: 1Password password manager database file
regex: regex:
- "(?i)\\.agilekeychain" - "(?i)\\.agilekeychain('|\")"
- type: regex - type: regex
name: ASP configuration file name: ASP configuration file
regex: regex:
- "(?i)\\.asa" - "(?i)\\.asa('|\")"
- type: regex - type: regex
name: Apple Keychain database file name: Apple Keychain database file
regex: regex:
- "(?i)\\.keychain" - "(?i)\\.keychain('|\")"
- type: regex - type: regex
name: Azure service configuration schema file name: Azure service configuration schema file
regex: regex:
- "(?i)\\.cscfg" - "(?i)\\.cscfg('|\")"
- type: regex - type: regex
name: Compressed archive file name: Compressed archive file
regex: regex:
- "(?i)(\\.zip|\\.gz|\\.tar|\\.rar|\\.tgz)" - "(?i)(\\.zip|\\.gz|\\.tar|\\.rar|\\.tgz)('|\")"
- type: regex - type: regex
name: Configuration file name: Configuration file
regex: regex:
- "(?i)(\\.ini|\\.config|\\.conf)" - "(?i)(\\.ini|\\.config|\\.conf)('|\")"
- type: regex - type: regex
name: Day One journal file name: Day One journal file
regex: regex:
- "(?i)\\.dayone" - "(?i)\\.dayone('|\")"
- type: regex - type: regex
name: Document file name: Document file
regex: regex:
- "(?i)(\\.doc|\\.docx|\\.rtf)" - "(?i)(\\.doc|\\.docx|\\.rtf)('|\")"
- type: regex - type: regex
name: GnuCash database file name: GnuCash database file
regex: regex:
- "(?i)\\.gnucash" - "(?i)\\.gnucash('|\")"
- type: regex - type: regex
name: Include file name: Include file
regex: regex:
- "(?i)\\.inc" - "(?i)\\.inc('|\")"
- type: regex - type: regex
name: XML file name: XML file
regex: regex:
- "(?i)\\.xml" - "(?i)\\.xml('|\")"
- type: regex - type: regex
name: Old file name: Old file
regex: regex:
- "(?i)\\.old" - "(?i)\\.old('|\")"
- type: regex - type: regex
name: Log file name: Log file
regex: regex:
- "(?i)\\.log" - "(?i)\\.log('|\")"
- type: regex - type: regex
name: Java file name: Java file
regex: regex:
- "(?i)\\.java" - "(?i)\\.java('|\")"
- type: regex - type: regex
name: SQL dump file name: SQL dump file
regex: regex:
- "(?i)\\.sql" - "(?i)\\.sql('|\")"
- type: regex - type: regex
name: Excel file name: Excel file
regex: regex:
- "(?i)(\\.xls|\\.xlsx|\\.csv)" - "(?i)(\\.xls|\\.xlsx|\\.csv)('|\")"
- type: regex - type: regex
name: Certificate file name: Certificate file
regex: regex:
- "(?i)(\\.cer|\\.crt|\\.p7b)" - "(?i)(\\.cer|\\.crt|\\.p7b)('|\")"
- type: regex - type: regex
name: Java key storte name: Java key storte
regex: regex:
- "(?i)\\.jks" - "(?i)\\.jks('|\")"
- type: regex - type: regex
name: KDE Wallet Manager database file name: KDE Wallet Manager database file
regex: regex:
- "(?i)\\.kwallet" - "(?i)\\.kwallet('|\")"
- type: regex - type: regex
name: Little Snitch firewall configuration file name: Little Snitch firewall configuration file
regex: regex:
- "(?i)\\.xpl" - "(?i)\\.xpl('|\")"
- type: regex - type: regex
name: Microsoft BitLocker Trusted Platform Module password file name: Microsoft BitLocker Trusted Platform Module password file
regex: regex:
- "(?i)\\.tpm" - "(?i)\\.tpm('|\")"
- type: regex - type: regex
name: Microsoft BitLocker recovery key file name: Microsoft BitLocker recovery key file
regex: regex:
- "(?i)\\.bek" - "(?i)\\.bek('|\")"
- type: regex - type: regex
name: Microsoft SQL database file name: Microsoft SQL database file
regex: regex:
- "(?i)\\.mdf" - "(?i)\\.mdf('|\")"
- type: regex - type: regex
name: Microsoft SQL server compact database file name: Microsoft SQL server compact database file
regex: regex:
- "(?i)\\.sdf" - "(?i)\\.sdf('|\")"
- type: regex - type: regex
name: Network traffic capture file name: Network traffic capture file
regex: regex:
- "(?i)\\.pcap" - "(?i)\\.pcap('|\")"
- type: regex - type: regex
name: OpenVPN client configuration file name: OpenVPN client configuration file
regex: regex:
- "(?i)\\.ovpn" - "(?i)\\.ovpn('|\")"
- type: regex - type: regex
name: PDF file name: PDF file
regex: regex:
- "(?i)\\.pdf" - "(?i)\\.pdf('|\")"
- type: regex - type: regex
name: PHP file name: PHP file
regex: regex:
- "(?i)\\.pcap" - "(?i)\\.pcap('|\")"
- type: regex - type: regex
name: Password Safe database file name: Password Safe database file
regex: regex:
- "(?i)\\.psafe3" - "(?i)\\.psafe3('|\")"
- type: regex - type: regex
name: Potential configuration file name: Potential configuration file
regex: regex:
- "(?i)\\.yml" - "(?i)\\.yml('|\")"
- type: regex - type: regex
name: Potential cryptographic key bundle name: Potential cryptographic key bundle
regex: regex:
- "(?i)(\\.pkcs12|\\.p12|\\.pfx|\\.asc|\\.pem)" - "(?i)(\\.pkcs12|\\.p12|\\.pfx|\\.asc|\\.pem)('|\")"
- type: regex - type: regex
name: Potential private key name: Potential private key
regex: regex:
- "(?i)otr.private_key" - "(?i)otr.private_key('|\")"
- type: regex - type: regex
name: Presentation file name: Presentation file
regex: regex:
- "(?i)(\\.ppt|\\.pptx)" - "(?i)(\\.ppt|\\.pptx)('|\")"
- type: regex - type: regex
name: Python file name: Python file
regex: regex:
- "(?i)\\.py" - "(?i)\\.py('|\")"
- type: regex - type: regex
name: Remote Desktop connection file name: Remote Desktop connection file
regex: regex:
- "(?i)\\.rdp" - "(?i)\\.rdp('|\")"
- type: regex - type: regex
name: Ruby On Rails file name: Ruby On Rails file
regex: regex:
- "(?i)\\.rb" - "(?i)\\.rb('|\")"
- type: regex - type: regex
name: SQLite database file name: SQLite database file
regex: regex:
- "(?i)\\.sqlite|\\.sqlitedb" - "(?i)\\.sqlite|\\.sqlitedb('|\")"
- type: regex - type: regex
name: SQLite3 database file name: SQLite3 database file
regex: regex:
- "(?i)\\.sqlite3" - "(?i)\\.sqlite3('|\")"
- type: regex - type: regex
name: Sequel Pro MySQL database manager bookmark file name: Sequel Pro MySQL database manager bookmark file
regex: regex:
- "(?i)\\.plist" - "(?i)\\.plist('|\")"
- type: regex - type: regex
name: Shell configuration file name: Shell configuration file
regex: regex:
- "(?i)(\\.exports|\\.functions|\\.extra)" - "(?i)(\\.exports|\\.functions|\\.extra)('|\")"
- type: regex - type: regex
name: Temporary file name: Temporary file
@ -252,21 +252,21 @@ file:
- type: regex - type: regex
name: Terraform variable config file name: Terraform variable config file
regex: regex:
- "(?i)\\.tfvars" - "(?i)\\.tfvars('|\")"
- type: regex - type: regex
name: Text file name: Text file
regex: regex:
- "(?i)\\.txt" - "(?i)\\.txt('|\")"
- type: regex - type: regex
name: Tunnelblick VPN configuration file name: Tunnelblick VPN configuration file
regex: regex:
- "(?i)\\.tblk" - "(?i)\\.tblk('|\")"
- type: regex - type: regex
name: Windows BitLocker full volume encrypted data file name: Windows BitLocker full volume encrypted data file
regex: regex:
- "(?i)\\.fve" - "(?i)\\.fve('|\")"
# digest: 490a0046304402203342df27b75080be4762275375e19b63832c89211544474786cce395d13a433302205bfa8b32a8b5f202b6562cc5ac1e8ea50086bca8c54ce36eec20e82d30449b22:922c64590222798bb761d5b6d8e72950 # digest: 490a0046304402203342df27b75080be4762275375e19b63832c89211544474786cce395d13a433302205bfa8b32a8b5f202b6562cc5ac1e8ea50086bca8c54ce36eec20e82d30449b22:922c64590222798bb761d5b6d8e72950