19533bcc08
removed content type check to avoid valid matches
2021-07-24 02:53:11 +05:30
4795c084e1
Update nginx-config.yaml
...
fixes a false positive
2021-07-23 15:18:51 -05:00
96c78d8695
additional negative matcher
2021-07-24 00:39:30 +05:30
1f4f8ce332
matcher update
2021-07-24 00:30:53 +05:30
840d3ee4e3
Update github-workflows-disclosure.yaml
...
removing content type check as this might miss valid results with no content type in response
2021-07-24 00:26:56 +05:30
b0b737e0eb
Update exposures/configs/hp-ilo-serial-key-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-24 00:24:26 +05:30
2dbeb70480
Update exposures/configs/github-workflows-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-24 00:24:11 +05:30
fccc31717a
Update exposures/configs/github-workflows-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-24 00:16:13 +05:30
763591bc97
lint fixes
2021-07-24 00:12:28 +05:30
1d9979fead
Update exposures/configs/hp-ilo-serial-key-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 17:54:36 +05:30
3528cd7bef
Update exposures/configs/github-workflows-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 17:54:27 +05:30
62c2693d34
Update exposures/configs/appsec-yml-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 17:54:17 +05:30
834d6b8f2a
Update dockerfile-hidden-disclosure.yaml
2021-07-23 17:49:32 +05:30
80b1205379
Update exposures/configs/kubernetes-kustomization-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:45:58 +05:30
a96c9c74c6
Update exposures/configs/kubernetes-kustomization-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:45:52 +05:30
4051f03440
Update exposures/configs/kubernetes-kustomization-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:45:44 +05:30
1646db1156
Update exposures/configs/hp-ilo-serial-key-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:45:37 +05:30
dd025100e7
Update exposures/configs/github-workflows-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:45:30 +05:30
ea45cdd369
Update exposures/configs/git-credentials-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:44:54 +05:30
9271fa9492
Update exposures/configs/dockerfile-hidden-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:44:47 +05:30
39f23522e4
Update exposures/configs/dockerfile-hidden-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:44:38 +05:30
838002d77a
Update exposures/configs/appsec-yml-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:44:23 +05:30
7d72783090
WIP improvements
2021-07-22 16:32:37 +05:30
419456f277
Update kubernetes-kustomization-disclosure.yaml
2021-07-21 13:39:36 +05:30
6e76e533c8
Create kubernetes-kustomization-disclosure.yaml
2021-07-21 13:36:59 +05:30
bf4d51136a
Create hp-ilo-serial-key-disclosure.yaml
2021-07-21 13:29:52 +05:30
15a19dea3d
Create github-workflows-disclosure.yaml
2021-07-21 13:21:05 +05:30
3425a83d38
Create git-credentials-disclosure.yaml
2021-07-21 11:19:35 +05:30
01bd0b38f4
Create dockerfile-hidden-disclosure.yaml
2021-07-21 11:13:50 +05:30
4f5a9f7d94
Create appsec-yml-disclosure.yaml
2021-07-21 11:09:04 +05:30
aec3d87e72
Update exposed-gitignore.yaml
...
New conditions to avoid false positives.
2021-07-17 23:15:08 -04:00
e232ba52d4
Added additional path
2021-07-14 18:24:26 +05:30
950cc356ee
path update
2021-07-14 17:39:50 +05:30
367bfd4441
Added keycloak-openid-config
2021-07-14 17:38:01 +05:30
7f1b075cf0
Temporally removing as matcher needs to be improved.
2021-07-11 13:37:39 +05:30
72781f8dfa
Merge branch 'master' into master
2021-07-10 15:07:33 +05:30
a35c34127c
Added content length condition
2021-07-10 00:40:09 +05:30
684761587d
Merge pull request #1913 from projectdiscovery/exposed-gitignore
...
Added exposed-gitignore
2021-07-09 22:52:44 +05:30
899f1e732b
Added exposed-gitignore
2021-07-09 22:50:20 +05:30
a77a3db701
Update symfony-database-config.yaml
...
Fixes #1910
2021-07-09 06:23:28 +00:00
cd8e485541
Added Git Logs
2021-07-07 20:51:33 +05:30
1b65d294d3
Merge pull request #1878 from jeenikaa/master
...
templates added
2021-07-07 18:57:46 +05:30
9d78a1656b
few updates
2021-07-07 18:52:35 +05:30
f97ae5ceba
minor update to check full header
2021-06-30 19:29:26 +05:30
199ee498f8
Update javascript-env.yaml
...
Added additional matchers to broaden detection
2021-06-30 13:55:21 +01:00
6d12b9bb6b
Added additional matcher
2021-06-30 17:53:27 +05:30
9bd750e28e
Update javascript-env.yaml
2021-06-30 16:07:25 +05:30
e04b943dce
Detect javascript environment configs.
2021-06-30 10:17:58 +00:00
96fc7bb341
more strict matchers
2021-06-30 03:26:01 +05:30
102d0b21b4
Removing duplicate template
2021-06-28 20:07:22 +05:30
fd63d24d53
Additional matcher
2021-06-11 16:20:34 +05:30
c539205559
Added phalcon-framework-source
2021-06-11 16:16:05 +05:30
83ce809e8d
Updated author names
2021-06-09 17:50:56 +05:30
3a307fdcdd
Update server-private-keys.yaml
2021-06-08 00:06:01 +00:00
578f83f39a
Update server-private-keys.yaml
...
Adding support for JWT private key detection.
2021-06-08 00:04:02 +00:00
1b879d1dc7
Added missing condition
2021-06-06 17:44:27 +05:30
9b3c3ec7a0
tags + additional string match
2021-06-06 14:14:01 +05:30
f01abd3e6d
Update rails-database-config.yaml
...
False positive reduction. 12 matches out of 2 million hosts and they all showed a content-type of `application/octet-stream`.
2021-06-05 12:50:49 +00:00
e4c1927a2f
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-06-04 20:00:36 +05:30
e2555d69d1
minor improvements
2021-06-04 19:59:41 +05:30
b6396aa310
Added zend-config-file
2021-06-04 18:50:38 +05:30
dac1649248
Merge pull request #1616 from projectdiscovery/CVE-2020-11978
...
Added CVE-2020-11978 & Airflow Workflow
2021-06-04 02:39:57 +05:30
0f0ff2ee1e
moving files around
2021-06-03 21:54:08 +05:30
9147d61ce7
Added missing tags
2021-06-03 19:48:37 +05:30
cdf6cdf638
Update detect-drone-config.yaml
2021-06-02 00:38:33 +05:30
259eb048cc
Update detect-drone-config.yaml
2021-06-02 00:33:22 +05:30
5d083f1124
Create detect-drone-config.yaml
2021-06-01 09:07:39 -05:00
9cd21c72b8
Added exposed-vscode
2021-05-31 12:28:19 +05:30
670b488bfe
more strict matcher
2021-05-31 11:17:26 +05:30
36c45cfbc9
Create hikvision-info-leak.yaml
2021-05-31 02:21:40 +00:00
ef7aa52fcd
Merge pull request #1537 from geeknik/patch-98
...
Create esmtprc.yaml
2021-05-28 09:12:01 +05:30
f2b7f88db9
misc changes
2021-05-28 09:09:55 +05:30
4e25fd7a33
Merge pull request #1539 from geeknik/patch-99
...
Create robomongo.yaml
2021-05-28 09:04:06 +05:30
6d6c95c6cc
misc changes
2021-05-28 09:01:24 +05:30
f287b87c86
Create robomongo.yaml
2021-05-26 16:36:36 -05:00
fe385ded1e
Create esmtprc.yaml
2021-05-26 16:28:18 -05:00
c65d023f96
Update amazon-docker-config-disclosure.yaml
2021-05-27 02:45:11 +05:30
207e86c419
Update docker-compose-config.yaml
2021-05-27 02:44:15 +05:30
a320fd7720
Merge pull request #1494 from Techbrunch/magento-stuff
...
Security Checks for Magento - Templates and workflow
2021-05-20 20:04:25 +05:30
1abbe0df30
Update netrc.yaml
2021-05-19 12:43:28 +00:00
9aa71e4954
misc changes
2021-05-19 06:45:50 +05:30
034d85e296
Create nagios-status-page.yaml
2021-05-19 00:51:15 +05:30
776776621a
Added a few Magento related templates
2021-05-18 15:53:10 +02:00
8894a058b9
Updating paths
2021-05-15 15:13:19 +05:30
3644f09534
Refrence also includes explaination and a solution
2021-05-10 09:47:28 +03:00
01f3541aae
Update ruijie-phpinfo.yaml
2021-05-10 01:45:12 +05:30
3856e88307
misc updates
2021-05-10 01:43:37 +05:30
84d919eb3d
Create ruijjie-phpinfo.yaml
2021-05-09 11:30:13 +00:00
ada897f4ef
Improved matcher
2021-05-08 02:17:09 +05:30
7033cf16b9
Adding plesk-stat
2021-05-07 17:00:19 +05:30
859af7e503
Merge pull request #1404 from DhiyaneshGeek/master
...
CVE-2019-8446,CVE-2018-10141,Oracle EBS Credentials Disclosure,Oracle EBS SQL Log Disclosure
2021-05-03 15:39:04 +05:30
c9e62eeed5
minor updates
2021-05-03 12:52:21 +05:30
52ea8d265b
Update server-private-keys.yaml
2021-05-03 01:57:02 +00:00
339992a6e2
Create oracle-ebs-credentials-disclosure.yaml
2021-05-03 00:31:38 +05:30
817ba2ae91
trailing spaces
2021-04-26 14:06:32 +05:30
beedd4eaf3
Update nginx-config.yaml
2021-04-26 14:02:47 +05:30
50b0fabbf0
Added samba-config
2021-04-26 14:00:03 +05:30
b055f40fd4
Added svnserve-config
2021-04-26 13:59:45 +05:30
f46a8918cd
Added httpd-config
2021-04-26 13:49:39 +05:30
ffbb94bbd2
Added php-fpm-config
2021-04-26 13:30:22 +05:30
572a1a5549
Added apache-config
2021-04-26 13:20:34 +05:30
cce1a0880b
Added nginx-config
2021-04-26 13:11:52 +05:30
3f0806abbd
Added proftpd-config
2021-04-26 13:07:38 +05:30
c838e67753
Added exposed-sharepoint-list
2021-04-26 12:49:20 +05:30
8886c88b2b
Create cisco-network-config.yaml
2021-04-22 02:29:31 +05:30
eaad43c58b
Merge pull request #1305 from pikpikcu/patch-151
...
Add kyan-network-monitor-disclosure
2021-04-20 14:58:31 +05:30
e7f848da72
minor updates
2021-04-20 14:57:16 +05:30
a3b23a2da1
minor updates
2021-04-20 14:41:34 +05:30
4e22fee6d3
Create exposed-authentication-asmx.yaml
2021-04-19 22:18:03 +05:30
c008cc8dc9
Merge pull request #42 from projectdiscovery/master
...
Updation
2021-04-19 21:36:00 +05:30
b14ab006f7
Create saia-web-server-info.yaml
2021-04-19 21:23:41 +05:30
4630e8100c
Create kyan-network-monitor-disclosure.yaml
2021-04-18 19:29:30 +00:00
257562cf08
Merge pull request #1294 from geeknik/patch-70
...
Update server-private-keys.yaml
2021-04-17 15:38:08 +05:30
a0a3ce5679
Merge pull request #1293 from geeknik/patch-72
...
Create ssh-authorized-keys.yaml
2021-04-17 15:37:28 +05:30
6e91e5f8f0
Update ssh-known-hosts.yaml
2021-04-16 15:22:21 +00:00
f877923dc0
Create ssh-authorized-keys.yaml
2021-04-16 15:21:00 +00:00
15c7ef6d48
Create ssh-known-hosts.yaml
2021-04-16 15:20:45 +00:00
3897c49b6c
Update server-private-keys.yaml
2021-04-16 15:16:51 +00:00
618c3a044b
Update ruijie-smartweb-disclosure.yaml
2021-04-14 17:00:09 +05:30
2343eae7bf
Update ruijie-smartweb-disclosure.yaml
2021-04-14 00:17:12 +00:00
268d60349c
Create ruijie-smartweb-disclosure.yaml
2021-04-14 00:07:08 +00:00
99cdbe8c5e
Up severity on public .env file and add description and reference
2021-04-11 16:35:07 +02:00
93cb25d1b1
Update laravel-env.yaml
2021-04-10 00:24:44 +03:00
19914dd2cf
Add files via upload
2021-04-10 00:20:35 +03:00
00a5fae317
Merge pull request #1216 from projectdiscovery/princechaddha-patch-4
...
Create coremail-config-disclosure.yaml
2021-04-08 22:25:03 +05:30
4f2f682cb4
minor fix
2021-04-08 22:23:50 +05:30
465f55f801
Merge pull request #1228 from geeknik/patch-65
...
Create yii-debugger.yaml
2021-04-08 22:09:14 +05:30
d246fb4ad8
moving files around
2021-04-08 21:39:19 +05:30
e5824a72f6
Update laravel-env.yaml
2021-04-08 01:31:27 +03:00
af25782bf4
Update laravel-env.yaml
2021-04-08 01:22:43 +03:00
31f9cf4838
Update laravel-env.yaml
2021-04-07 23:17:02 +03:00
11dec8ac1b
Remove Equal
...
I noticed that some vulnerable sites were being missed out since it expected the site to have APP_* which isn't always the case
2021-04-07 23:11:57 +03:00
110fb47614
Update yii-debugger.yaml
2021-04-07 18:57:10 +00:00
3e1e41d6bd
Create yii-debugger.yaml
2021-04-07 17:39:24 +00:00
ec9fe4ff55
Merge pull request #1218 from projectdiscovery/detect-aws-services
...
Templates to detect cloud storage services
2021-04-07 16:08:21 +05:30
0e097263ca
Added google-bucket-service detection
2021-04-07 15:52:58 +05:30
d336658e9c
Update server-private-keys.yaml
2021-04-07 03:19:34 +00:00
476473dc99
Create coremail-config-disclosure.yaml
2021-04-07 01:19:30 +05:30
93e373621b
Rename docker-compose-config.yml template to yaml
2021-04-06 15:51:01 +02:00
8fdfc64e54
misc tag updates
2021-04-06 12:16:11 +05:30
3ef39c173e
more tag supports
2021-04-03 13:38:45 +05:30
8601b2167d
more tags update
2021-04-02 18:40:33 +05:30
b48c9e865c
moving files around
2021-04-02 15:17:55 +05:30
882592f40d
Update web-config.yaml
2021-03-30 00:20:15 +05:30
4b0eb5c3d3
Added tags to config templates
2021-03-29 23:57:05 +05:30
e88a49a120
Create eea-disclosure.yaml
2021-03-29 18:08:24 +00:00
351167e91f
removing redundant boolean check
2021-03-25 00:28:50 +01:00
4f1d794f14
Update exposed-bitkeeper.yaml
...
Looking at multiple sources, it seems as though adding `Bitkeeper configuration` would help lower the false positive rate.
2021-03-19 03:17:22 +00:00
1c5903d6f6
Merge pull request #1052 from geeknik/patch-45
...
Create circleci-ssh-config.yaml
2021-03-11 20:01:38 +05:30
ff4df95a5e
Update circleci-ssh-config.yaml
2021-03-11 14:29:16 +00:00
2233a0dbe3
Merge pull request #1051 from geeknik/patch-44
...
Create circleci-config.yaml
2021-03-11 19:17:05 +05:30
9976e74fc7
Merge pull request #1050 from geeknik/patch-43
...
Update docker-compose-config.yml
2021-03-10 19:43:09 +05:30
06945d56a8
fixing typos
2021-03-10 19:33:49 +05:30
70f3204d53
Update circleci-config.yaml
2021-03-09 21:40:35 +00:00
0bfb348b74
Create circleci-ssh-config.yaml
2021-03-09 21:40:04 +00:00
223d390388
Update circleci-config.yaml
...
Changing severity from medium to low.
2021-03-09 21:15:59 +00:00
13155a5e70
Create circleci-config.yaml
2021-03-09 21:10:42 +00:00
0e9b40a212
Update docker-compose-config.yml
...
My bad, wasn't a duplicate line. Guess I need my eyes checked. \m/
2021-03-09 20:52:45 +00:00
c4fbeb6ad4
Update docker-compose-config.yml
...
Remove duplicate line and add support for docker-compose.override.yml
2021-03-09 20:49:46 +00:00
f3cf303c44
Create ruijie-information-disclosure.yaml
2021-03-08 11:11:49 +00:00
0d1d8bd832
Update exposed-hg.yaml
2021-03-07 07:51:23 +00:00
3e22272fbc
Adding version print
...
thanks to @@meme-lord
2021-03-06 16:05:21 +05:30
06f67cdbfc
moving files around
2021-03-04 22:29:42 +05:30
629e0e7bc0
Merge pull request #1006 from daffainfo/patch-6
...
Create exposed-darcs.yaml
2021-03-04 16:55:01 +05:30
c3ead4494e
Update exposed-darcs.yaml
2021-03-04 16:54:34 +05:30
b2a87fbc2d
Merge pull request #1007 from daffainfo/patch-7
...
Create exposed-bitkeeper.yaml
2021-03-04 16:50:50 +05:30
82d6f9d370
improved matcher
2021-03-04 16:50:18 +05:30
a3ea73d43e
Merge pull request #1005 from daffainfo/patch-5
...
Create exposed-bzr.yaml
2021-03-04 16:47:22 +05:30
383d9a160c
Adding reference
2021-03-04 16:44:24 +05:30
0089e39874
Improving matchers
2021-03-04 16:42:05 +05:30
de7c175c56
removing duplicates
2021-03-04 16:37:12 +05:30
6e5d9edaed
Update phpinfo.yaml
2021-03-04 05:58:37 +07:00
463b947700
Create exposed-bitkeeper.yaml
2021-03-03 08:19:24 +07:00
d5b8d16a2b
Create exposed-darcs.yaml
2021-03-03 08:05:30 +07:00
5d3250c172
Create exposed-bzr.yaml
2021-03-03 07:40:51 +07:00
a97f89623a
Update exposed-hg.yaml
2021-03-02 21:37:41 +05:30
50de7f79cf
Create exposed-hg.yaml
2021-03-02 18:32:14 +07:00
237f58f3f0
Update phpinfo.yaml
2021-02-27 14:46:19 +07:00
b54cdbca08
Update honeywell-scada-config.yaml
2021-02-23 16:40:16 +05:30
b06d7d6a23
Added honeywell-scada-config
2021-02-23 15:39:47 +05:30
eb7643ae63
Added awstats-config
2021-02-23 15:37:32 +05:30
0a4070aa2a
Added awstats PL script
2021-02-23 14:36:43 +05:30
27bf194e67
misc updates
2021-02-22 11:58:50 +05:30
22fbb99fdb
Update ftp-credentials-exposure.yaml
2021-02-22 01:25:25 +05:30
6f74d31e0b
few updates
2021-02-20 22:41:54 +05:30
c476d079d1
Update sftp-credentials-exposure.yaml
2021-02-20 23:07:10 +07:00
698167e7c3
Merge branch 'master' into sftp-credentials-exposure
2021-02-20 19:50:00 +05:30
bbb4b2d7df
Update sftp-credentials-exposure.yaml
2021-02-20 19:48:44 +05:30
a64b89396d
added sftp-credentials-exposure
2021-02-20 19:48:06 +05:30
2e5cfa3d42
Update phpinfo.yaml
2021-02-20 16:21:07 +06:00
15c56c59d9
Update lvmeng-uts-disclosure.yaml
2021-02-13 15:18:52 +05:30
4e618b6fae
Update lvmeng-uts-disclosure.yaml
2021-02-13 14:43:42 +05:30
01b729237d
Create lvmeng-uts-disclosure.yaml
2021-02-13 07:13:02 +00:00
ede5233467
Update docker-compose-config.yml ( #839 )
2021-02-11 13:07:02 +05:30
512030fc3a
Add template for docker-compose config disclosure ( #837 )
2021-02-11 01:45:57 +05:30
d39d4f52aa
Update laravel-env.yaml ( #828 )
...
* Update laravel-env.yaml
* Update laravel-env.yaml
2021-02-09 18:29:23 +05:30
e440c1fd67
Update laravel-env.yaml ( #825 )
2021-02-08 18:18:52 +05:30
80320f50f2
Update gmail-api-client-secrets.yaml
2021-02-03 17:03:19 +05:30
5f98811ddb
Create gmail-api-client-secrets.yaml
2021-02-01 21:22:27 +00:00
d469835cc5
misc changes
2021-01-30 11:02:29 +05:30
c762044d29
updating incorrect file permissions
2021-01-21 23:28:32 +05:30
a922262352
moving files around
2021-01-21 20:31:16 +05:30
0c237549fe
Add further path to composer-config.yaml
...
If the vendor directory is part of the web root you can also find the config in the provided path. Of course you've then also some more problems besides that ;)
2021-01-15 10:29:10 +01:00
389477dd28
removing duplicate template
2021-01-12 11:47:44 +05:30
0b4c49e485
misc
2021-01-11 13:24:57 +05:30
2d28f321ab
Create exposed-alps-spring.yaml
2021-01-11 13:21:50 +05:30
9ab927f60c
lint fixes
2021-01-11 04:24:00 +05:30
f2f7ada0ff
few more updates
2021-01-10 19:46:50 +05:30
a52ffe5c4e
fixes and updates
2021-01-10 19:45:36 +05:30
a90d047991
Massive template checks addition 🎉 🎉
2021-01-10 18:41:25 +05:30
187e4a5feb
moving more files around
2021-01-09 18:32:04 +05:30
sandeep
Geeknik Labs
Dhiyaneshwaran
Philippe Delteil
sandeep
pdparchitect
Petko D. Petkov
Prince Chaddha
PikPikcU
Techbrunch
Noam Rathaus
Dieter Van der Stock
Alfie Njeru
Julian Vilas
Mzack9999
Muhammad Daffa
sandeep
sheikhrishad
Piotr Ptaszek
meme-lord
Tommy Mühle