Commit Graph

475 Commits (71531d84675c18f2f000417f54e8d6c35560562c)

Author SHA1 Message Date
Dhiyaneshwaran 733e98f1e2
Create ruby-on-rails-secret-token-disclosure.yaml 2021-07-21 14:03:20 +05:30
Dhiyaneshwaran 929250a6af
Create roundcube-log-disclosure.yaml 2021-07-21 14:01:09 +05:30
Dhiyaneshwaran f66e7676a6
Create pyproject-disclosure.yaml 2021-07-21 13:57:17 +05:30
Dhiyaneshwaran 6bfc270917
Update php-user-ini-disclosure.yaml 2021-07-21 13:54:09 +05:30
Dhiyaneshwaran 4d53c1f2a5
Create putty-private-key-disclosure.yaml 2021-07-21 13:53:55 +05:30
Dhiyaneshwaran f20c444b4e
Create php-user-ini-disclosure.yaml 2021-07-21 13:49:50 +05:30
Dhiyaneshwaran 419456f277
Update kubernetes-kustomization-disclosure.yaml 2021-07-21 13:39:36 +05:30
Dhiyaneshwaran 6e76e533c8
Create kubernetes-kustomization-disclosure.yaml 2021-07-21 13:36:59 +05:30
Dhiyaneshwaran bf4d51136a
Create hp-ilo-serial-key-disclosure.yaml 2021-07-21 13:29:52 +05:30
Dhiyaneshwaran 15a19dea3d
Create github-workflows-disclosure.yaml 2021-07-21 13:21:05 +05:30
Dhiyaneshwaran 3425a83d38
Create git-credentials-disclosure.yaml 2021-07-21 11:19:35 +05:30
Dhiyaneshwaran 01bd0b38f4
Create dockerfile-hidden-disclosure.yaml 2021-07-21 11:13:50 +05:30
Dhiyaneshwaran 4f5a9f7d94
Create appsec-yml-disclosure.yaml 2021-07-21 11:09:04 +05:30
Geeknik Labs f9b3724f87
Update general-tokens.yaml 2021-07-20 16:46:25 -05:00
Philippe Delteil aec3d87e72
Update exposed-gitignore.yaml
New conditions to avoid false positives.
2021-07-17 23:15:08 -04:00
sandeep e232ba52d4 Added additional path 2021-07-14 18:24:26 +05:30
sandeep 950cc356ee path update 2021-07-14 17:39:50 +05:30
sandeep 367bfd4441 Added keycloak-openid-config 2021-07-14 17:38:01 +05:30
Sandeep Singh 360f8d9a94
Update exposed-glances-api.yaml 2021-07-14 14:20:18 +05:30
Prince Chaddha 5838f76600
Create exposed-glances-api.yaml 2021-07-14 12:37:51 +05:30
sandeep 6dd92167eb minor updates 2021-07-13 19:35:58 +05:30
Dhiyaneshwaran b283f65482
Create exposed-prometheus-log.yaml 2021-07-13 19:24:13 +05:30
Sandeep Singh 920255635b
Merge pull request #1876 from pussycat0x/master
web-ftp
2021-07-13 01:53:15 +05:30
sandeep 3c7f4ed78c matcher update 2021-07-13 01:22:06 +05:30
pussycat0x 7947954aba
Add files via upload 2021-07-12 23:23:30 +05:30
sandeep 7f1b075cf0 Temporally removing as matcher needs to be improved. 2021-07-11 13:37:39 +05:30
Sandeep Singh 72781f8dfa
Merge branch 'master' into master 2021-07-10 15:07:33 +05:30
sandeep a35c34127c Added content length condition 2021-07-10 00:40:09 +05:30
Sandeep Singh 684761587d
Merge pull request #1913 from projectdiscovery/exposed-gitignore
Added exposed-gitignore
2021-07-09 22:52:44 +05:30
sandeep 899f1e732b Added exposed-gitignore 2021-07-09 22:50:20 +05:30
Geeknik Labs a77a3db701
Update symfony-database-config.yaml
Fixes #1910
2021-07-09 06:23:28 +00:00
Prince Chaddha 124b960503
Update lucee-stack-trace.yaml 2021-07-09 09:50:42 +05:30
Prince Chaddha 64b36e181b
Update lucee-stack-trace.yaml 2021-07-09 09:45:38 +05:30
Dhiyaneshwaran b3bd3b4355
Create lucee-stack-trace.yaml 2021-07-09 01:44:30 +05:30
sandeep cd8e485541 Added Git Logs 2021-07-07 20:51:33 +05:30
Sandeep Singh 1b65d294d3
Merge pull request #1878 from jeenikaa/master
templates added
2021-07-07 18:57:46 +05:30
sandeep 9d78a1656b few updates 2021-07-07 18:52:35 +05:30
Dhiyaneshwaran 648def7a9c
Update strapi-page.yaml 2021-07-05 22:45:34 +05:30
Dhiyaneshwaran eb0d1f9766
Create strapi-page.yaml 2021-07-05 22:31:57 +05:30
sandeep afcbe4cfe4 minor updates 2021-07-04 01:22:08 +05:30
Dhiyaneshwaran 532bf58f3d
Update jboss-seam-debug-page.yaml 2021-07-02 20:52:09 +05:30
Dhiyaneshwaran a53902e99c
Create jboss-seam-debug-page.yaml 2021-07-01 22:34:38 +05:30
sandeep f97ae5ceba minor update to check full header 2021-06-30 19:29:26 +05:30
pdparchitect 199ee498f8
Update javascript-env.yaml
Added additional matchers to broaden detection
2021-06-30 13:55:21 +01:00
sandeep 6d12b9bb6b Added additional matcher 2021-06-30 17:53:27 +05:30
sandeep 9bd750e28e Update javascript-env.yaml 2021-06-30 16:07:25 +05:30
Petko D. Petkov e04b943dce Detect javascript environment configs. 2021-06-30 10:17:58 +00:00
sandeep 96fc7bb341 more strict matchers 2021-06-30 03:26:01 +05:30
sandeep 102d0b21b4 Removing duplicate template 2021-06-28 20:07:22 +05:30
sandeep 525c0cce48 misc changes 2021-06-24 00:38:16 +05:30
Geeknik Labs d7eae53622
Update general-tokens.yaml
fix more FP
2021-06-23 15:50:38 +00:00
Geeknik Labs c2eb8b2df2
Update general-tokens.yaml
Better false positive protection.
https://regex101.com/r/taSYEa/1
2021-06-23 15:45:55 +00:00
sandeep fd63d24d53 Additional matcher 2021-06-11 16:20:34 +05:30
sandeep c539205559 Added phalcon-framework-source 2021-06-11 16:16:05 +05:30
Sandeep Singh 06faaf7736
Merge pull request #1652 from pdelteil/patch-12
Create shoppable-token.yaml
2021-06-10 14:32:01 +05:30
sandeep 2a6ba9a0e8 Update shoppable-token.yaml 2021-06-10 14:30:53 +05:30
Prince Chaddha 83ce809e8d Updated author names 2021-06-09 17:50:56 +05:30
Philippe Delteil 8f12988b7b
Create shoppable-token.yaml 2021-06-09 02:22:28 -04:00
Geeknik Labs 3a307fdcdd
Update server-private-keys.yaml 2021-06-08 00:06:01 +00:00
Geeknik Labs 578f83f39a
Update server-private-keys.yaml
Adding support for JWT private key detection.
2021-06-08 00:04:02 +00:00
sandeep 52a7bfa124 minor updates 2021-06-07 20:22:33 +05:30
Dhiyaneshwaran 5eb6af15bd
Create shellscripts.yaml 2021-06-06 19:39:29 +05:30
sandeep 1b879d1dc7 Added missing condition 2021-06-06 17:44:27 +05:30
sandeep 9b3c3ec7a0 tags + additional string match 2021-06-06 14:14:01 +05:30
Geeknik Labs f01abd3e6d
Update rails-database-config.yaml
False positive reduction. 12 matches out of 2 million hosts and they all showed a content-type of `application/octet-stream`.
2021-06-05 12:50:49 +00:00
sandeep e4c1927a2f Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates 2021-06-04 20:00:36 +05:30
sandeep e2555d69d1 minor improvements 2021-06-04 19:59:41 +05:30
sandeep b6396aa310 Added zend-config-file 2021-06-04 18:50:38 +05:30
Sandeep Singh dac1649248
Merge pull request #1616 from projectdiscovery/CVE-2020-11978
Added CVE-2020-11978 & Airflow Workflow
2021-06-04 02:39:57 +05:30
sandeep 0f0ff2ee1e moving files around 2021-06-03 21:54:08 +05:30
sandeep 9147d61ce7 Added missing tags 2021-06-03 19:48:37 +05:30
Sandeep Singh 9a21a3f24b
Merge pull request #1602 from geeknik/patch-102
Update general-tokens.yaml
2021-06-02 11:03:53 +05:30
Prince Chaddha cdf6cdf638
Update detect-drone-config.yaml 2021-06-02 00:38:33 +05:30
Prince Chaddha 259eb048cc
Update detect-drone-config.yaml 2021-06-02 00:33:22 +05:30
Geeknik Labs d949ad7520
Update general-tokens.yaml
fix another false positive
2021-06-01 18:22:05 +00:00
Geeknik Labs 5d083f1124
Create detect-drone-config.yaml 2021-06-01 09:07:39 -05:00
sandeep 91941dc8ed Adding max-size to avoid timeout 2021-06-01 13:21:24 +05:30
sandeep 0b85f59a62 Adding max-size limit to avoid timeout 2021-06-01 13:05:11 +05:30
Geeknik Labs fe1ab8385d
Update and rename exposures/logs/circarlife-system-log.yaml to cves/2018/CVE-2018-12634.yaml 2021-05-31 11:31:04 -05:00
sandeep 9cd21c72b8 Added exposed-vscode 2021-05-31 12:28:19 +05:30
sandeep 670b488bfe more strict matcher 2021-05-31 11:17:26 +05:30
PikPikcU 36c45cfbc9
Create hikvision-info-leak.yaml 2021-05-31 02:21:40 +00:00
sandeep 9006fb0ce5 misc changes 2021-05-29 15:02:33 +05:30
Sandeep Singh ef7aa52fcd
Merge pull request #1537 from geeknik/patch-98
Create esmtprc.yaml
2021-05-28 09:12:01 +05:30
sandeep f2b7f88db9 misc changes 2021-05-28 09:09:55 +05:30
Sandeep Singh 4e25fd7a33
Merge pull request #1539 from geeknik/patch-99
Create robomongo.yaml
2021-05-28 09:04:06 +05:30
sandeep 6d6c95c6cc misc changes 2021-05-28 09:01:24 +05:30
Geeknik Labs f287b87c86
Create robomongo.yaml 2021-05-26 16:36:36 -05:00
Geeknik Labs fe385ded1e
Create esmtprc.yaml 2021-05-26 16:28:18 -05:00
Prince Chaddha c65d023f96
Update amazon-docker-config-disclosure.yaml 2021-05-27 02:45:11 +05:30
Prince Chaddha 207e86c419
Update docker-compose-config.yaml 2021-05-27 02:44:15 +05:30
Sandeep Singh a320fd7720
Merge pull request #1494 from Techbrunch/magento-stuff
Security Checks for Magento - Templates and workflow
2021-05-20 20:04:25 +05:30
Geeknik Labs 1abbe0df30
Update netrc.yaml 2021-05-19 12:43:28 +00:00
Sandeep Singh 8dc00ab3ed
Merge pull request #1497 from DhiyaneshGeek/master
Nagios Current Status Page , Saferoads VMS Login
2021-05-19 06:46:08 +05:30
sandeep 9aa71e4954 misc changes 2021-05-19 06:45:50 +05:30
Dhiyaneshwaran 034d85e296
Create nagios-status-page.yaml 2021-05-19 00:51:15 +05:30
Techbrunch 9005a3f532 Merge branch 'projectdiscovery:master' into magento-stuff 2021-05-18 20:50:33 +02:00
sandeep 0f65a06a64 misc changes 2021-05-18 19:58:25 +05:30
sandeep 1d7d2cbd22 Moving files around 2021-05-18 19:57:16 +05:30
Techbrunch 776776621a Added a few Magento related templates 2021-05-18 15:53:10 +02:00
Mubassir Patel b9a01ac726 ioncube-loader-wizard added 2021-05-17 23:13:02 -04:00
sandeep 7856903e83 minor fix 2021-05-17 01:25:04 +05:30
sandeep 4f4a08bdd2 Added joomla-file-listing 2021-05-16 21:27:05 +05:30
sandeep 8894a058b9 Updating paths 2021-05-15 15:13:19 +05:30
Sandeep Singh 1148fb08e3
Merge pull request #1441 from StreetOfHackerR007/patch-2
Create php-backup-files.yaml
2021-05-12 00:48:16 +05:30
sandeep 211521d2df Adding more matchers 2021-05-12 00:45:00 +05:30
Sandeep Singh 27ed8be9dd
Merge pull request #1444 from DhiyaneshGeek/master
PHP Debug bar,SAP Directory Listing,Unauthenticated Netdata,Zippkin Unauth
2021-05-11 23:07:35 +05:30
sandeep 19fac7242e Improved matchers 2021-05-11 23:06:18 +05:30
Noam Rathaus 3644f09534 Refrence also includes explaination and a solution 2021-05-10 09:47:28 +03:00
sandeep 01f3541aae Update ruijie-phpinfo.yaml 2021-05-10 01:45:12 +05:30
sandeep 3856e88307 misc updates 2021-05-10 01:43:37 +05:30
PikPikcU 84d919eb3d
Create ruijjie-phpinfo.yaml 2021-05-09 11:30:13 +00:00
Dhiyaneshwaran 7e7a96245e
Create php-debug-bar.yaml 2021-05-09 11:59:35 +05:30
sandeep ada897f4ef Improved matcher 2021-05-08 02:17:09 +05:30
sandeep 000a754100 moving files around 2021-05-08 01:41:36 +05:30
STREET_OF_HACKER - R007 3b90b9dc64
Create php-backup-files.yaml 2021-05-08 01:25:06 +05:30
sandeep 7033cf16b9 Adding plesk-stat 2021-05-07 17:00:19 +05:30
Sandeep Singh 1f8b029dcf
Merge pull request #1428 from geeknik/patch-88
Create squid-analysis-report-generator.yaml
2021-05-07 16:09:34 +05:30
sandeep b17f90afed tag updates! 2021-05-07 16:08:22 +05:30
sandeep 8a997ae855 Update darkstat-detect.yaml 2021-05-07 15:51:06 +05:30
Geeknik Labs ed6ab66037
Create squid-analysis-report-generator.yaml 2021-05-06 21:54:27 +00:00
Geeknik Labs bc565cc428
Update darkstat-detect.yaml 2021-05-06 19:50:47 +00:00
Geeknik Labs d3dddb624a
Create darkstat-detect.yaml 2021-05-06 19:44:19 +00:00
sandeep ae13e5e44e minor updates 2021-05-05 17:53:34 +05:30
Dhiyaneshwaran aacce3eced
Create gogs-install-exposure.yaml 2021-05-03 18:24:14 +05:30
Sandeep Singh 859af7e503
Merge pull request #1404 from DhiyaneshGeek/master
CVE-2019-8446,CVE-2018-10141,Oracle EBS Credentials Disclosure,Oracle EBS SQL Log Disclosure
2021-05-03 15:39:04 +05:30
sandeep c9e62eeed5 minor updates 2021-05-03 12:52:21 +05:30
Geeknik Labs 52ea8d265b
Update server-private-keys.yaml 2021-05-03 01:57:02 +00:00
Dhiyaneshwaran 5ec9a1c6ac
Create oracle-ebs-sqllog-disclosure.yaml 2021-05-03 00:40:42 +05:30
Dhiyaneshwaran 339992a6e2
Create oracle-ebs-credentials-disclosure.yaml 2021-05-03 00:31:38 +05:30
sandeep 4c65429aed Added exposed-mysql-initial 2021-04-27 13:20:04 +05:30
Sandeep Singh 33d279fe17
Merge pull request #1361 from geeknik/patch-79
Create circarlife-system-log.yaml
2021-04-26 18:43:35 +05:30
sandeep 201ccb059f Update circarlife-system-log.yaml 2021-04-26 18:43:17 +05:30
sandeep 817ba2ae91 trailing spaces 2021-04-26 14:06:32 +05:30
sandeep beedd4eaf3 Update nginx-config.yaml 2021-04-26 14:02:47 +05:30
sandeep 50b0fabbf0 Added samba-config 2021-04-26 14:00:03 +05:30
sandeep b055f40fd4 Added svnserve-config 2021-04-26 13:59:45 +05:30
sandeep f46a8918cd Added httpd-config 2021-04-26 13:49:39 +05:30
sandeep ffbb94bbd2 Added php-fpm-config 2021-04-26 13:30:22 +05:30
sandeep 572a1a5549 Added apache-config 2021-04-26 13:20:34 +05:30
sandeep cce1a0880b Added nginx-config 2021-04-26 13:11:52 +05:30
sandeep 3f0806abbd Added proftpd-config 2021-04-26 13:07:38 +05:30
sandeep c838e67753 Added exposed-sharepoint-list 2021-04-26 12:49:20 +05:30
Geeknik Labs 96d6f013a4
Create circarlife-system-log.yaml 2021-04-24 15:44:07 +00:00
Dhiyaneshwaran 8886c88b2b
Create cisco-network-config.yaml 2021-04-22 02:29:31 +05:30
Sandeep Singh eaad43c58b
Merge pull request #1305 from pikpikcu/patch-151
Add kyan-network-monitor-disclosure
2021-04-20 14:58:31 +05:30
sandeep e7f848da72 minor updates 2021-04-20 14:57:16 +05:30
Sandeep Singh 93f2403676
Merge pull request #1308 from pikpikcu/patch-152
Create phpunit.yaml
2021-04-20 14:46:01 +05:30
sandeep a3b23a2da1 minor updates 2021-04-20 14:41:34 +05:30
Dhiyaneshwaran 4e22fee6d3
Create exposed-authentication-asmx.yaml 2021-04-19 22:18:03 +05:30
Dhiyaneshwaran c008cc8dc9
Merge pull request #42 from projectdiscovery/master
Updation
2021-04-19 21:36:00 +05:30
Dhiyaneshwaran b14ab006f7
Create saia-web-server-info.yaml 2021-04-19 21:23:41 +05:30
PikPikcU c854434f70
Update phpunit.yaml 2021-04-19 15:48:53 +00:00
PikPikcU fa87838ced
Create phpunit.yaml 2021-04-19 13:01:02 +00:00
PikPikcU 4630e8100c
Create kyan-network-monitor-disclosure.yaml 2021-04-18 19:29:30 +00:00
Geeknik Labs d6841eea4f
Update error-logs.yaml 2021-04-17 12:48:50 +00:00
Sandeep Singh 257562cf08
Merge pull request #1294 from geeknik/patch-70
Update server-private-keys.yaml
2021-04-17 15:38:08 +05:30
Sandeep Singh a0a3ce5679
Merge pull request #1293 from geeknik/patch-72
Create ssh-authorized-keys.yaml
2021-04-17 15:37:28 +05:30
Geeknik Labs 6e91e5f8f0
Update ssh-known-hosts.yaml 2021-04-16 15:22:21 +00:00
Geeknik Labs f877923dc0
Create ssh-authorized-keys.yaml 2021-04-16 15:21:00 +00:00
Geeknik Labs 15c7ef6d48
Create ssh-known-hosts.yaml 2021-04-16 15:20:45 +00:00
Geeknik Labs 3897c49b6c
Update server-private-keys.yaml 2021-04-16 15:16:51 +00:00
PD-Team d7171f7d4a
Merge pull request #1281 from pikpikcu/patch-145
Add Ruijie Disclosure
2021-04-14 17:01:09 +05:30
sandeep 618c3a044b Update ruijie-smartweb-disclosure.yaml 2021-04-14 17:00:09 +05:30
PikPikcU 39d3349399
Update swagger-api.yaml 2021-04-14 03:26:50 +00:00
PikPikcU 2343eae7bf
Update ruijie-smartweb-disclosure.yaml 2021-04-14 00:17:12 +00:00
PikPikcU 268d60349c
Create ruijie-smartweb-disclosure.yaml 2021-04-14 00:07:08 +00:00
sandeep 34a68cdde3 Moving tokens under exposures with tags support 2021-04-13 19:18:02 +05:30
PD-Team 82437a9830
Merge pull request #1263 from dietervds/edit-some-laravel-templates
Edits to two Laravel related templates
2021-04-11 20:55:50 +05:30
Dieter Van der Stock cb58bffb82 Shorten description on laravel-log-file a bit 2021-04-11 16:35:27 +02:00
Dieter Van der Stock 99cdbe8c5e Up severity on public .env file and add description and reference 2021-04-11 16:35:07 +02:00
Dieter Van der Stock 1ceb80dfd3 Set laravel log exposure severity to high. Add description and reference. 2021-04-11 16:32:06 +02:00
PD-Team 4fcd670a09
Merge pull request #1248 from geeknik/patch-66
Create laravel-telescope.yaml
2021-04-11 19:55:45 +05:30
sandeep 352dd36c51 Update laravel-telescope.yaml 2021-04-11 19:55:27 +05:30
sandeep 45197abd96 Added access-log-file 2021-04-11 16:23:53 +05:30
Geeknik Labs e176461add
Create laravel-telescope.yaml 2021-04-10 13:32:24 +00:00
Alfie Njeru 93cb25d1b1
Update laravel-env.yaml 2021-04-10 00:24:44 +03:00
Alfie Njeru 19914dd2cf
Add files via upload 2021-04-10 00:20:35 +03:00
PD-Team 00a5fae317
Merge pull request #1216 from projectdiscovery/princechaddha-patch-4
Create coremail-config-disclosure.yaml
2021-04-08 22:25:03 +05:30
sandeep 4f2f682cb4 minor fix 2021-04-08 22:23:50 +05:30
PD-Team 465f55f801
Merge pull request #1228 from geeknik/patch-65
Create yii-debugger.yaml
2021-04-08 22:09:14 +05:30
sandeep d246fb4ad8 moving files around 2021-04-08 21:39:19 +05:30
Alfie Njeru e5824a72f6
Update laravel-env.yaml 2021-04-08 01:31:27 +03:00
Alfie Njeru af25782bf4
Update laravel-env.yaml 2021-04-08 01:22:43 +03:00
Alfie Njeru 31f9cf4838
Update laravel-env.yaml 2021-04-07 23:17:02 +03:00
Alfie Njeru 11dec8ac1b
Remove Equal
I noticed that some vulnerable sites were being missed out since it expected the site to have APP_* which isn't always the case
2021-04-07 23:11:57 +03:00
Geeknik Labs 110fb47614
Update yii-debugger.yaml 2021-04-07 18:57:10 +00:00
Geeknik Labs 3e1e41d6bd
Create yii-debugger.yaml 2021-04-07 17:39:24 +00:00
PD-Team 314bb011a4
Merge pull request #1213 from geeknik/patch-63
Update laravel-log-file.yaml
2021-04-07 18:00:45 +05:30
PD-Team b51d4837c9
Merge pull request #1211 from geeknik/patch-62
Update error-logs.yaml
2021-04-07 17:59:20 +05:30
sandeep c103f8c73c Removing duplicate 2021-04-07 17:57:53 +05:30
PD-Team ec9fe4ff55
Merge pull request #1218 from projectdiscovery/detect-aws-services
Templates to detect cloud storage services
2021-04-07 16:08:21 +05:30
sandeep 0e097263ca Added google-bucket-service detection 2021-04-07 15:52:58 +05:30
Geeknik Labs d336658e9c
Update server-private-keys.yaml 2021-04-07 03:19:34 +00:00
Prince Chaddha 476473dc99
Create coremail-config-disclosure.yaml 2021-04-07 01:19:30 +05:30
Geeknik Labs 3c8e98f3d4
Update laravel-log-file.yaml 2021-04-06 19:27:45 +00:00
Geeknik Labs bf7e688554
Update error-logs.yaml 2021-04-06 19:18:24 +00:00
Geeknik Labs 81d8f6ed0a
Update error-logs.yaml 2021-04-06 19:13:34 +00:00
Julian Vilas 93e373621b Rename docker-compose-config.yml template to yaml 2021-04-06 15:51:01 +02:00
sandeep 8fdfc64e54 misc tag updates 2021-04-06 12:16:11 +05:30