a7a1c861af
Added secret detectors for FCM API keys, mapbox API keys, razorpay client id, zapier webhooks
2023-02-13 22:16:43 +05:30
312b6819e9
Enhancement: exposures/configs/golangci-config.yaml by cs
2023-02-13 11:45:35 -05:00
0c0400681c
Enhancement: exposures/configs/firebase-config-exposure.yaml by cs
2023-02-13 11:45:03 -05:00
ba7b266e12
Enhancement: exposures/configs/exposed-vscode.yaml by cs
2023-02-13 11:43:31 -05:00
8eaab1c5be
Enhancement: exposures/configs/exposed-sharepoint-list.yaml by cs
2023-02-13 11:41:55 -05:00
8d14f7836a
Enhancement: exposures/configs/exposed-hg.yaml by cs
2023-02-13 11:40:56 -05:00
0e4e5128c9
Enhancement: exposures/configs/exposed-darcs.yaml by cs
2023-02-13 11:39:49 -05:00
b2dacc3670
Enhancement: exposures/configs/exposed-bzr.yaml by cs
2023-02-13 11:38:58 -05:00
9527003f6c
Enhancement: exposures/configs/exposed-authentication-asmx.yaml by cs
2023-02-13 11:38:03 -05:00
fad509fb64
Enhancement: exposures/configs/editor-exposure.yaml by cs
2023-02-13 11:37:05 -05:00
b355925956
error
2023-02-13 16:38:59 +01:00
a1b2b5f3ef
Enhancement: exposures/configs/debug-vars.yaml by cs
2023-02-13 10:27:33 -05:00
b63baef96f
Enhancement: exposures/configs/codeception-config.yaml by cs
2023-02-13 10:25:36 -05:00
e627cef0d5
Enhancement: exposures/configs/cisco-network-config.yaml by cs
2023-02-13 10:24:17 -05:00
d36d591c09
Enhancement: exposures/configs/circleci-ssh-config.yaml by cs
2023-02-13 10:22:45 -05:00
a494633b4f
Enhancement: exposures/configs/circleci-config.yaml by cs
2023-02-13 10:20:41 -05:00
ebc519f9e8
Enhancement: exposures/configs/behat-config.yaml by cs
2023-02-13 10:19:55 -05:00
26fd7eaa85
Enhancement: exposures/configs/apache-config.yaml by cs
2023-02-13 10:18:10 -05:00
24f765c7be
Enhancement: exposures/configs/apache-config.yaml by cs
2023-02-13 10:17:03 -05:00
62c78652e8
Add phpinfo() for WAMP server
2023-02-13 10:14:10 -05:00
61ec39b7e7
Enhancement: exposures/configs/accueil-wampserver.yaml by cs
2023-02-13 10:10:50 -05:00
9697804209
Enhancement: exposures/configs/accueil-wampserver.yaml by cs
2023-02-13 10:09:38 -05:00
5c0519ee61
Spacing and minor name tweaks
2023-02-13 09:41:20 -05:00
6f5381e0e7
indentation -fix
2023-02-13 18:44:56 +05:30
4926c2951a
Update svn-wc-db.yaml
2023-02-13 16:23:06 +05:30
239f8d6b6d
Update svn-wc-db.yaml
...
Most of the time wc.db file is big in size, response from the web server may take time, could lead to content deadline exceeded error, even if the wc.db file exist.
So I change the HTTP Method to HEAD
Also, I change the rating to High because it could lead to source code disclosure.
I cross verified with one of my target, current template does not work, so here is the revised one.
Reference: https://infosecwriteups.com/indias-aadhar-card-source-code-disclosure-via-exposed-svn-wc-db-c05519ea7761
2023-02-13 16:17:37 +05:30
d5f2d1b9e2
credentials-disclosure: regex accessToken
...
regex matching accessToken matches on `"accessToken":null` which is a false positive.
This PR attempts to resolve this by explicitly asking the regex to not match null.
2023-02-13 10:35:31 +01:00
004f0b8df3
Create ssl-private-key.yaml
...
This template checks for eposed SSL Private keys
2023-02-13 12:45:39 +05:30
67a6742f7d
Error Correction
2023-02-12 21:00:22 +05:30
7634ef7153
Added Razorpay-client-id, Zapier webhook, mapbox, fcm api keys
2023-02-12 18:42:05 +05:30
a3c60792cf
updated name
2023-02-11 10:30:13 +05:30
4b0f78cdf5
updated name
2023-02-11 10:29:55 +05:30
8d26b3fea5
Improve Keycloak templates
2023-02-10 22:01:43 +01:00
fe3a2d5e3d
Enhancement: exposures/configs/debug-vars.yaml by md
2023-02-09 16:39:16 -05:00
67e11377e7
Enhancement: exposures/configs/docker-compose-config.yaml by md
2023-02-09 16:38:53 -05:00
8c070b4d6a
Enhancement: exposures/configs/firebase-config-exposure.yaml by md
2023-02-09 16:33:42 -05:00
2685e350e4
Enhancement: exposures/configs/kubernetes-kustomization-disclosure.yaml by md
2023-02-09 16:30:02 -05:00
7232a65cef
Enhancement: exposures/configs/karma-config-js.yaml by md
2023-02-09 16:25:02 -05:00
4fa67e2b36
Enhancement: exposures/configs/joomla-config-file.yaml by md
2023-02-09 16:22:10 -05:00
87ce20e3f9
Enhancement: exposures/configs/javascript-env.yaml by md
2023-02-09 16:20:21 -05:00
bc702249f2
Enhancement: exposures/configs/hp-ilo-serial-key-disclosure.yaml by md
2023-02-09 16:19:26 -05:00
d2ca8d26c5
Enhancement: exposures/configs/honeywell-scada-config.yaml by md
2023-02-09 16:17:34 -05:00
bea6ec0f15
Enhancement: exposures/configs/hikvision-info-leak.yaml by md
2023-02-09 16:12:01 -05:00
fb43816749
Enhancement: exposures/configs/golangci-config.yaml by md
2023-02-09 16:07:20 -05:00
88e2481a3d
Enhancement: exposures/configs/ftp-credentials-exposure.yaml by md
2023-02-09 16:04:25 -05:00
66eed50b9e
Enhancement: exposures/configs/git-credentials-disclosure.yaml by md
2023-02-09 16:03:58 -05:00
039760d7fe
Enhancement: exposures/configs/git-credentials-disclosure.yaml by md
2023-02-09 16:01:33 -05:00
c0e2295750
Enhancement: exposures/configs/git-config.yaml by md
2023-02-09 16:01:21 -05:00
21e8614248
Enhancement: exposures/configs/ftp-credentials-exposure.yaml by md
2023-02-09 15:58:22 -05:00
997482718f
Enhancement: exposures/configs/exposed-vscode.yaml by md
2023-02-09 15:56:03 -05:00
6f89de04fa
Enhancement: exposures/configs/firebase-config-exposure.yaml by md
2023-02-09 15:54:05 -05:00
ed34fd6c52
Enhancement: exposures/configs/exposed-vscode.yaml by md
2023-02-09 15:45:20 -05:00
224f487bc1
Enhancement: exposures/configs/exposed-svn.yaml by md
2023-02-09 15:40:44 -05:00
f501e830c9
Enhancement: exposures/configs/exposed-sharepoint-list.yaml by md
2023-02-09 15:38:37 -05:00
afe1826c07
Enhancement: exposures/configs/exposed-hg.yaml by md
2023-02-09 15:14:54 -05:00
c75b88a594
Enhancement: exposures/configs/exposed-darcs.yaml by md
2023-02-09 15:04:17 -05:00
9e8b5a060d
Enhancement: exposures/configs/exposed-bzr.yaml by md
2023-02-09 15:02:38 -05:00
3811e39210
Enhancement: exposures/configs/exposed-bitkeeper.yaml by md
2023-02-09 15:00:08 -05:00
6791e7d854
Enhancement: exposures/configs/dockerfile-hidden-disclosure.yaml by md
2023-02-09 14:52:16 -05:00
a25fc6d5b1
Enhancement: exposures/configs/exposed-authentication-asmx.yaml by md
2023-02-09 14:48:07 -05:00
16dd3d1ec5
Enhancement: exposures/configs/editor-exposure.yaml by md
2023-02-09 14:40:10 -05:00
a662376393
Enhancement: exposures/configs/docker-compose-config.yaml by md
2023-02-09 14:34:04 -05:00
d7c460ec79
Enhancement: exposures/configs/debug-vars.yaml by md
2023-02-09 14:29:36 -05:00
85a729b8e3
Enhancement: exposures/configs/cypress-web-config.yaml by md
2023-02-09 14:22:57 -05:00
9290b722dd
Enhancement: exposures/configs/configuration-listing.yaml by md
2023-02-09 14:16:40 -05:00
eaa7228f13
Enhancement: exposures/configs/configuration-listing.yaml by md
2023-02-09 14:15:30 -05:00
bceb82e41e
updated path
2023-02-09 10:25:47 +05:30
ba478ab8ca
Enhancement: exposures/backups/froxlor-database-backup.yaml by md
2023-02-08 14:48:19 -05:00
3ab8eccdd6
Enhancement: exposures/apis/drupal-jsonapi-user-listing.yaml by md
2023-02-08 14:47:51 -05:00
ae31c01450
Enhancement: exposures/configs/config-rb.yaml by md
2023-02-08 14:40:35 -05:00
2edd10291a
Enhancement: exposures/configs/config-json.yaml by md
2023-02-08 14:37:11 -05:00
4e27cc3d18
Enhancement: exposures/configs/codeception-config.yaml by md
2023-02-08 14:35:13 -05:00
23cb99b0cb
Enhancement: exposures/configs/cisco-network-config.yaml by md
2023-02-08 14:33:38 -05:00
dc51b920fa
Enhancement: exposures/configs/circleci-ssh-config.yaml by md
2023-02-08 14:28:58 -05:00
e263201812
Enhancement: exposures/configs/circleci-config.yaml by md
2023-02-08 14:23:16 -05:00
1b8ac9f42a
Enhancement: exposures/configs/cgi-printenv.yaml by md
2023-02-08 14:19:26 -05:00
c6dac0782b
Enhancement: exposures/configs/cakephp-config.yaml by md
2023-02-08 14:16:53 -05:00
ca24568ee0
Enhancement: exposures/configs/cakephp-config.yaml by md
2023-02-08 14:16:26 -05:00
eef7e87833
Enhancement: exposures/configs/behat-config.yaml by md
2023-02-08 13:23:14 -05:00
de2eed9288
Enhancement: exposures/configs/appveyor-configuration-file.yaml by md
2023-02-08 13:19:47 -05:00
4ac2fa84bd
Enhancement: exposures/configs/appspec-yml-disclosure.yaml by md
2023-02-08 13:17:05 -05:00
e624c92fa5
Enhancement: exposures/configs/apache-config.yaml by md
2023-02-08 13:12:01 -05:00
5e4bc9ee58
Enhancement: exposures/configs/ansible-config-disclosure.yaml by md
2023-02-08 12:47:49 -05:00
0f4f2b73f9
Enhancement: exposures/configs/amazon-docker-config.yaml by md
2023-02-08 12:45:25 -05:00
e7efb348c6
Enhancement: exposures/configs/airflow-configuration-exposure.yaml by md
2023-02-08 12:09:30 -05:00
49205c6e58
Enhancement: exposures/configs/accueil-wampserver.yaml by md
2023-02-08 12:04:58 -05:00
be25544e20
Enhancement: exposures/backups/zip-backup-files.yaml by md
2023-02-08 12:00:50 -05:00
e76b7a3385
Enhancement: exposures/backups/froxlor-database-backup.yaml by md
2023-02-08 11:59:03 -05:00
c03aa430f4
Enhancement: exposures/backups/php-backup-files.yaml by md
2023-02-08 11:58:40 -05:00
151aea655f
Enhancement: exposures/backups/settings-php-files.yaml by md
2023-02-08 11:58:08 -05:00
cb1cc93249
Enhancement: exposures/backups/php-backup-files.yaml by md
2023-02-08 11:56:36 -05:00
bca483ca6a
Enhancement: exposures/backups/froxlor-database-backup.yaml by md
2023-02-08 11:54:51 -05:00
91fa93df6b
Enhancement: exposures/apis/drupal-jsonapi-user-listing.yaml by md
2023-02-08 11:36:47 -05:00
0610e45ecf
syntax fixes
2023-02-07 04:27:49 +05:30
54d5955b9e
Indentation fix
2023-02-07 02:24:19 +05:30
ff7575884b
duplicate field fix
2023-02-07 02:19:41 +05:30
6eb1df20f9
lint fix
2023-02-07 02:17:29 +05:30
4979936c94
lint fix
2023-02-07 02:16:38 +05:30
a7e8803359
lint fix
2023-02-07 02:15:37 +05:30
6e5d2b6e14
lint fix
2023-02-07 02:14:34 +05:30
Devang Solanki
MostInterestingBotInTheWorld
sduc
sullo
pussycat0x
Rizwan Syed
Ritik Chaddha
Thibault Soubiran
sandeep