56590675cf
Update squid-analysis-report-generator.yaml
2021-09-16 15:16:26 -05:00
95664dfc18
Update credentials-disclosure.yaml
2021-09-16 15:13:12 -05:00
42e644b7fd
Update bower-json.yaml
2021-09-16 15:11:24 -05:00
cb80cbb537
Create dsm-terminator-error.yaml
2021-09-14 22:46:01 +05:30
c225428932
Create struts-problem-report.yaml
2021-09-14 22:30:18 +05:30
be24688a48
Create error-processing.yaml
2021-09-14 21:49:36 +05:30
bd24dc198e
Coverage for all templates using tags
2021-09-09 19:08:13 +05:30
609705f676
removed extra headers not required for template
2021-09-08 17:47:19 +05:30
ef1f7c5e92
Updates across many templates for clarity, spelling, and grammar.
2021-09-05 17:13:45 -04:00
cdd022c29d
Merge pull request #2550 from projectdiscovery/adding-sfm
...
Added stop-at-first-match in applicable templates
2021-09-02 23:09:21 +05:30
8b37808730
misc update
2021-09-02 22:57:55 +05:30
5414f9a618
Update general-tokens.yaml
2021-09-02 10:36:46 -05:00
c266084621
Added stop-at-first-match in applicable templates
2021-09-02 17:29:10 +05:30
0d1d2b3b1b
Merge pull request #2512 from DhiyaneshGeek/master
...
Webpack Sourcemap Disclosure
2021-09-02 00:34:56 +05:30
aeac5bbec3
misc update
2021-08-31 01:03:44 +05:30
7608386bb3
Update dbeaver-credentials.yaml
2021-08-30 15:24:34 +05:30
7a9093c8a7
Update dbeaver-credentials.yaml
...
Change solve the false positives due to {} (empty response)
Example
nuclei -t nuclei-templates/exposures/configs/dbeaver-credentials.yaml -u https://lbs.map.qq.com
2021-08-30 02:55:35 -04:00
8c1de71ec9
wip - update
2021-08-29 18:50:29 +05:30
6bade73727
Create webpack-sourcemap-disclosure.yaml
2021-08-29 17:13:44 +05:30
a4250b8f2f
Merge remote-tracking branch 'origin' into dynamic_attributes
2021-08-26 15:04:14 +03:00
39ce8ee5b2
misc updates
2021-08-26 15:03:35 +05:30
1685ce08b0
Apache Axis 1 and 2 templates
2021-08-26 02:11:02 +00:00
ee49f89109
misc update
2021-08-26 03:51:35 +05:30
0d3d9a37d9
misc update
2021-08-26 03:47:32 +05:30
ce1daa8c80
Update glpi-status-ldap-domain-disclosure.yaml
2021-08-26 03:42:53 +05:30
22d0b35775
GLPI detection, status and telemetry exposure
2021-08-25 21:55:22 +00:00
110f9c9ddd
Merge remote-tracking branch 'origin' into dynamic_attributes
2021-08-24 20:38:11 +03:00
ae0aabd905
misc update
2021-08-24 02:50:14 +05:30
a124e393b4
Merge remote-tracking branch 'origin' into dynamic_attributes
2021-08-23 19:15:14 +03:00
647d27925a
Merge pull request #2426 from projectdiscovery/generic
...
Templates by geeknik
2021-08-23 19:55:32 +05:30
b5ec33e4c0
Update dockercfg-config.yaml
2021-08-23 19:52:39 +05:30
1def46a72e
Update firebase-config-exposure.yaml
2021-08-23 15:11:10 +05:30
93894d5b8c
Update dbeaver-credentials.yaml
2021-08-23 15:09:33 +05:30
43fe743729
Update and rename dockercfg.yaml to dockercfg-config.yaml
2021-08-23 15:07:02 +05:30
e160acb481
misc updates
2021-08-20 16:37:22 +05:30
77103bc629
Satisfying the linter (all errors and warnings)
...
* whitespace modifications only
2021-08-19 17:44:46 +03:00
002e8db616
Moved the "vendor" custom attribute under reference
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 17:00:46 +03:00
f55d6b75e1
Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 16:59:12 +03:00
7b29be739e
Merge branch 'master' into dynamic_attributes
2021-08-19 16:23:26 +03:00
0b432b341b
Added comments with URLs under the "references" field
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 16:15:35 +03:00
e68d15ab63
Fixed mistakes/typos in the templates.
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 15:30:14 +03:00
f65a78bb5c
Create firebase-config-exposure.yaml
2021-08-19 16:56:13 +05:30
acbacf339d
Update dockercfg.yaml
2021-08-19 16:48:50 +05:30
2e4c8e22f2
Create dockercfg.yaml
2021-08-19 16:47:22 +05:30
d7e7c39982
Update dbeaver-credentials.yaml
2021-08-19 16:34:32 +05:30
c980eea40b
Create dbeaver-credentials.yaml
2021-08-19 16:32:09 +05:30
760af33ce9
Update db-schema.yaml
2021-08-19 15:03:10 +05:30
4c27b5d5ee
Create db-schema.yaml
2021-08-19 15:00:00 +05:30
20e66005b7
Update and rename couchbase-buckets-rest-api.yaml to couchbase-buckets-api.yaml
2021-08-19 14:57:01 +05:30
d10c81b2ba
Create couchbase-buckets-rest-api.yaml
2021-08-19 14:56:35 +05:30
4d9bd2d13b
Update zend-config-file.yaml
2021-08-19 14:27:45 +05:30
cdf9451158
Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-18 14:44:27 +03:00
4c920b2552
Rename "references" to "reference" to match the expected template info structure
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-18 14:29:20 +03:00
5b17aea895
Merge pull request #2388 from geeknik/patch-17
...
Update general-tokens.yaml
2021-08-17 22:34:03 +05:30
5c994cfad6
Update general-tokens.yaml
...
I believe this might work.
2021-08-17 11:52:31 -05:00
9850ced093
strict matchers
2021-08-17 22:11:28 +05:30
5e55dc1e24
Create django-debug-exposure.yaml
2021-08-17 17:37:57 +05:30
51b15ff0d4
severity update
2021-08-14 17:28:23 +05:30
ffcfaa5cb1
minor update
2021-08-14 16:51:20 +05:30
739622c7ab
Merge pull request #2394 from gabrielb3lmont/exposures_templates
...
Added crossdomain-xml Template
2021-08-14 15:46:53 +05:30
77f59df9c8
Update crossdomin-xml.yaml
2021-08-14 15:45:34 +05:30
d13bc82a2e
Update crossdomin-xml.yaml
2021-08-14 14:42:16 +05:30
3183242eb3
Merge pull request #2366 from pikpikcu/patch-250
...
Create iceflow-vpn-disclosure
2021-08-14 14:37:09 +05:30
9c51bc0abb
Update iceflow-vpn-disclosure.yaml
2021-08-14 14:35:41 +05:30
6b65897dd9
Update iceflow-vpn-disclosure.yaml
2021-08-14 14:30:29 +05:30
e6d9a1ec90
Fixed crossdomain-xml template
2021-08-13 11:25:10 -07:00
126e27e3b2
Added crossdomain-xml Template
2021-08-13 10:49:41 -07:00
c9daa11bd8
Update general-tokens.yaml
2021-08-12 09:54:57 -05:00
166049bf0b
Update general-tokens.yaml
...
more FP work
2021-08-12 09:53:33 -05:00
68dad33565
Merge pull request #2365 from daffainfo/patch-144
...
Update laravel-env.yaml
2021-08-12 18:48:11 +05:30
39e0fd7c54
Update general-tokens.yaml
...
Nuking more false positives
2021-08-12 07:55:11 -05:00
ca3af4527d
Update iceflow-vpn-disclosure.yaml
2021-08-10 14:31:05 +07:00
2956610eab
Create iceflow-vpn-disclosure.yaml
2021-08-10 10:02:17 +07:00
999a8febb9
Update laravel-env.yaml
2021-08-10 09:54:37 +07:00
a6e3a6a458
Merge branch 'master' into master
2021-08-09 16:09:41 +05:30
8ab6fc07bc
Update laravel-env.yaml
...
added new path
2021-08-09 13:43:29 +07:00
b86e8eabf9
Update codeigniter-env.yaml
2021-08-08 01:22:58 +05:30
a5500cca02
Additional optional matcher
2021-08-08 01:19:15 +05:30
5767a0d5a2
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates into pr/1241
2021-08-08 01:13:41 +05:30
b111aeadc3
Update laravel-env.yaml
2021-08-08 01:11:14 +05:30
31a77d4e02
Update symfony-profiler.yaml
2021-08-07 09:19:05 +07:00
f01678b9c6
Update symfony-database-config.yaml
2021-08-07 09:18:02 +07:00
685183858e
minor update
2021-08-06 23:35:35 +05:30
30c5d2c3b8
Update ruijie-eg-password-leak.yaml
2021-08-06 23:07:27 +05:30
6a3a7ae691
password extractor
2021-08-06 23:04:32 +05:30
fc1af10daa
Added ruijie-eg-password-leak
2021-08-06 22:42:41 +05:30
5952685f5c
Create ruijie-nbr1300g-cli-password-leak.yaml
2021-08-06 17:46:57 +07:00
24efdfd678
Update qdpm-info-leak.yaml
2021-08-05 16:17:30 +05:30
8e0a730e3d
Rename vulnerabilities/other/qdpm-info-leak.yaml to exposures/configs/qdpm-info-leak.yaml
2021-08-05 16:10:17 +05:30
a02ae7bef7
Update general-tokens.yaml
2021-08-02 12:27:07 -05:00
61bb675add
Update general-tokens.yaml
...
squashing false positives
2021-08-02 12:25:54 -05:00
3c713144d4
Update general-tokens.yaml
...
fix more fp
2021-08-02 10:17:06 -05:00
162cf14687
Merge pull request #782 from hahwul/master
...
Create github-page-files.yml
2021-07-30 18:15:28 +05:30
7fe896ae45
Update github-page-config.yaml
2021-07-30 18:13:32 +05:30
efb5b9e7a3
Added tags
2021-07-30 18:12:12 +05:30
51915f8f9a
Template improvements
2021-07-30 18:01:05 +05:30
a7f75416f0
Update and rename appsec-yml-disclosure.yaml to appspec-yml-disclosure.yaml
2021-07-30 13:16:30 +03:00
5e3cc340ee
Update credentials-disclosure.yaml
...
I feel like we should make these regex case insensitive so they match unexpected variations. For example, the `api[_-]?key(=| =|:| :)` regex before my change would match `apikey :`, `api_key =` and `api-key:` but not `apiKey=`.
2021-07-29 14:08:41 -05:00
8da48bbea8
Update git-config.yaml
...
improvement suggestion to keep it simple and flexible
2021-07-29 15:17:15 +02:00
e9210d80bf
strict negative matchers
2021-07-26 15:14:33 +05:30
b990243906
uniform tags
2021-07-26 14:25:43 +05:30
d4a3f345fb
tags update
2021-07-26 14:23:27 +05:30
eaa2561c70
Merge pull request #2170 from geeknik/patch-13
...
Create development-logs.yaml
2021-07-26 14:21:12 +05:30
c15e827b84
Update development-logs.yaml
2021-07-26 14:18:24 +05:30
7c7e3f06bc
Merge pull request #2169 from geeknik/patch-12
...
Create production-logs.yaml
2021-07-26 01:53:26 +05:30
09a5ea061a
Update production-logs.yaml
2021-07-26 01:52:26 +05:30
9f66b8925d
Merge pull request #2115 from geeknik/patch-5
...
Update general-tokens.yaml
2021-07-26 01:47:39 +05:30
5441d97bea
Merge pull request #2131 from geeknik/patch-8
...
Create wp-app-log.yaml
2021-07-26 01:22:37 +05:30
d43b57b56a
Update wp-app-log.yaml
2021-07-26 01:21:43 +05:30
130f3576b6
Merge pull request #2130 from geeknik/patch-7
...
Create cold-fusion-cfcache-map.yaml
2021-07-26 01:17:15 +05:30
037c531d58
Update cold-fusion-cfcache-map.yaml
2021-07-26 01:15:39 +05:30
c9f5f01bb9
minor update
2021-07-26 00:39:16 +05:30
41c41abdb7
Update exposed-gitignore.yaml
...
Fixes the issue here: https://github.com/projectdiscovery/nuclei-templates/issues/1898#issuecomment-886237512
2021-07-25 18:29:28 +00:00
7afc39cb32
Create development-logs.yaml
2021-07-24 14:29:43 -05:00
e428dc6454
Create production-logs.yaml
2021-07-24 14:28:33 -05:00
4b444af3c4
Merge pull request #2125 from DhiyaneshGeek/master
...
17 New Templates Added
2021-07-24 03:26:09 +05:30
b1d8ab1193
more matchers update
2021-07-24 03:13:09 +05:30
1ea3b8a8bf
matcher updates
2021-07-24 03:03:31 +05:30
9788ebbf27
more matcher updates
2021-07-24 02:54:09 +05:30
19533bcc08
removed content type check to avoid valid matches
2021-07-24 02:53:11 +05:30
4795c084e1
Update nginx-config.yaml
...
fixes a false positive
2021-07-23 15:18:51 -05:00
a957dc230c
Update exposures/files/snyk-ignore-file-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-24 00:51:05 +05:30
96c78d8695
additional negative matcher
2021-07-24 00:39:30 +05:30
1f4f8ce332
matcher update
2021-07-24 00:30:53 +05:30
840d3ee4e3
Update github-workflows-disclosure.yaml
...
removing content type check as this might miss valid results with no content type in response
2021-07-24 00:26:56 +05:30
5f4127cdaf
Update exposures/files/ruby-on-rails-secret-token-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-24 00:24:45 +05:30
b0b737e0eb
Update exposures/configs/hp-ilo-serial-key-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-24 00:24:26 +05:30
2dbeb70480
Update exposures/configs/github-workflows-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-24 00:24:11 +05:30
fccc31717a
Update exposures/configs/github-workflows-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-24 00:16:13 +05:30
763591bc97
lint fixes
2021-07-24 00:12:28 +05:30
1d9979fead
Update exposures/configs/hp-ilo-serial-key-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 17:54:36 +05:30
3528cd7bef
Update exposures/configs/github-workflows-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 17:54:27 +05:30
62c2693d34
Update exposures/configs/appsec-yml-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 17:54:17 +05:30
834d6b8f2a
Update dockerfile-hidden-disclosure.yaml
2021-07-23 17:49:32 +05:30
1671b074c0
Update exposures/logs/roundcube-log-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:47:22 +05:30
6754ef5dd2
Update exposures/files/thumbs-db-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:47:16 +05:30
7b5af09772
Update exposures/files/snyk-ignore-file-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:47:06 +05:30
fd2df6ca59
Update exposures/files/snyk-ignore-file-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:47:00 +05:30
fd918ee65c
Update exposures/files/pyproject-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:46:52 +05:30
f21894a431
Update exposures/files/pyproject-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:46:46 +05:30
bdc15afe1b
Update exposures/files/putty-private-key-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:46:40 +05:30
cb73dc4630
Update exposures/files/putty-private-key-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:46:32 +05:30
e96b8ca338
Update exposures/files/php-user-ini-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:46:26 +05:30
c4a1a12fe8
Update exposures/files/php-user-ini-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:46:06 +05:30
80b1205379
Update exposures/configs/kubernetes-kustomization-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:45:58 +05:30
a96c9c74c6
Update exposures/configs/kubernetes-kustomization-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:45:52 +05:30
4051f03440
Update exposures/configs/kubernetes-kustomization-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:45:44 +05:30
1646db1156
Update exposures/configs/hp-ilo-serial-key-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:45:37 +05:30
dd025100e7
Update exposures/configs/github-workflows-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:45:30 +05:30
ea45cdd369
Update exposures/configs/git-credentials-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:44:54 +05:30
Geeknik Labs
Dhiyaneshwaran
sandeep
sullo
Philippe Delteil
forgedhallpass
Douglas Santos
Prince Chaddha
Prince Chaddha
LogicalHunter
PikPikcU
Muhammad Daffa
adriyansyah-mf
nxnjz
Nicolas Mattiocco