Commit Graph

323 Commits (c55579f5f5fed2709ea61e5299b992e3324894c9)

Author SHA1 Message Date
Geeknik Labs a8a063d14c
Create prometheus-flags-endpoint.yaml 2021-10-18 13:36:27 -05:00
Geeknik Labs c7efad4b58
Create prometheus-config-endpoint.yaml 2021-10-18 13:35:04 -05:00
Geeknik Labs a476fc9ca4
Update laravel-env.yaml
added case insensitivity to the regex matcher
2021-10-08 11:30:44 -05:00
Sandeep Singh 4d52f354ee
Merge pull request #2853 from pdelteil/patch-66
Update zend-config-file.yaml
2021-10-08 19:15:45 +05:30
sandeep 8960821db1 Update zend-config-file.yaml 2021-10-08 19:15:26 +05:30
Philippe Delteil 976f695929
Update zend-config-file.yaml 2021-10-08 03:53:52 -03:00
Geeknik Labs 589a1c16ee
Update github-workflows-disclosure.yaml 2021-10-07 16:51:45 -05:00
Geeknik Labs 793f3474b0
Update github-workflows-disclosure.yaml
Add new paths
2021-10-07 16:50:57 -05:00
Prince Chaddha 5c4dd11b6b
Rename misconfiguration/wpconfig-aws-keys.yaml to exposures/configs/wpconfig-aws-keys.yaml 2021-10-05 18:20:43 +05:30
Prince Chaddha 807920c0ac clean-up 2021-09-21 17:16:53 +05:30
Prince Chaddha ab4e6a4dd6
Merge pull request #2696 from DhiyaneshGeek/master
New Templates Added
2021-09-17 16:29:58 +05:30
Prince Chaddha 156daddde0
Update phpinfo.yaml 2021-09-17 13:20:06 +05:30
Dhiyaneshwaran 24b40f5f5d
Update phpinfo.yaml 2021-09-17 08:19:28 +05:30
sandeep bd24dc198e Coverage for all templates using tags 2021-09-09 19:08:13 +05:30
sandeep 609705f676 removed extra headers not required for template 2021-09-08 17:47:19 +05:30
sandeep c266084621 Added stop-at-first-match in applicable templates 2021-09-02 17:29:10 +05:30
Sandeep Singh 7608386bb3
Update dbeaver-credentials.yaml 2021-08-30 15:24:34 +05:30
Philippe Delteil 7a9093c8a7
Update dbeaver-credentials.yaml
Change solve the false positives due to  {} (empty response)

Example

nuclei -t nuclei-templates/exposures/configs/dbeaver-credentials.yaml -u https://lbs.map.qq.com
2021-08-30 02:55:35 -04:00
forgedhallpass 110f9c9ddd Merge remote-tracking branch 'origin' into dynamic_attributes 2021-08-24 20:38:11 +03:00
sandeep ae0aabd905 misc update 2021-08-24 02:50:14 +05:30
forgedhallpass a124e393b4 Merge remote-tracking branch 'origin' into dynamic_attributes 2021-08-23 19:15:14 +03:00
Prince Chaddha 647d27925a
Merge pull request #2426 from projectdiscovery/generic
Templates by geeknik
2021-08-23 19:55:32 +05:30
Sandeep Singh 1def46a72e
Update firebase-config-exposure.yaml 2021-08-23 15:11:10 +05:30
Sandeep Singh 93894d5b8c
Update dbeaver-credentials.yaml 2021-08-23 15:09:33 +05:30
sandeep e160acb481 misc updates 2021-08-20 16:37:22 +05:30
forgedhallpass 77103bc629 Satisfying the linter (all errors and warnings)
* whitespace modifications only
2021-08-19 17:44:46 +03:00
forgedhallpass 002e8db616 Moved the "vendor" custom attribute under reference
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 17:00:46 +03:00
forgedhallpass f55d6b75e1 Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 16:59:12 +03:00
forgedhallpass 7b29be739e Merge branch 'master' into dynamic_attributes 2021-08-19 16:23:26 +03:00
forgedhallpass 0b432b341b Added comments with URLs under the "references" field
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 16:15:35 +03:00
forgedhallpass e68d15ab63 Fixed mistakes/typos in the templates.
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 15:30:14 +03:00
Prince Chaddha f65a78bb5c
Create firebase-config-exposure.yaml 2021-08-19 16:56:13 +05:30
Prince Chaddha d7e7c39982
Update dbeaver-credentials.yaml 2021-08-19 16:34:32 +05:30
Prince Chaddha c980eea40b
Create dbeaver-credentials.yaml 2021-08-19 16:32:09 +05:30
Prince Chaddha 4d9bd2d13b
Update zend-config-file.yaml 2021-08-19 14:27:45 +05:30
forgedhallpass cdf9451158 Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-18 14:44:27 +03:00
sandeep 9850ced093 strict matchers 2021-08-17 22:11:28 +05:30
Muhammad Daffa 999a8febb9
Update laravel-env.yaml 2021-08-10 09:54:37 +07:00
Sandeep Singh a6e3a6a458
Merge branch 'master' into master 2021-08-09 16:09:41 +05:30
adriyansyah-mf 8ab6fc07bc
Update laravel-env.yaml
added new path
2021-08-09 13:43:29 +07:00
sandeep b86e8eabf9 Update codeigniter-env.yaml 2021-08-08 01:22:58 +05:30
sandeep a5500cca02 Additional optional matcher 2021-08-08 01:19:15 +05:30
sandeep 5767a0d5a2 Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates into pr/1241 2021-08-08 01:13:41 +05:30
sandeep b111aeadc3 Update laravel-env.yaml 2021-08-08 01:11:14 +05:30
PikPikcU 31a77d4e02
Update symfony-profiler.yaml 2021-08-07 09:19:05 +07:00
PikPikcU f01678b9c6
Update symfony-database-config.yaml 2021-08-07 09:18:02 +07:00
sandeep 685183858e minor update 2021-08-06 23:35:35 +05:30
sandeep 30c5d2c3b8 Update ruijie-eg-password-leak.yaml 2021-08-06 23:07:27 +05:30
sandeep 6a3a7ae691 password extractor 2021-08-06 23:04:32 +05:30
sandeep fc1af10daa Added ruijie-eg-password-leak 2021-08-06 22:42:41 +05:30
PikPikcU 5952685f5c
Create ruijie-nbr1300g-cli-password-leak.yaml 2021-08-06 17:46:57 +07:00
sandeep 24efdfd678 Update qdpm-info-leak.yaml 2021-08-05 16:17:30 +05:30
Prince Chaddha 8e0a730e3d
Rename vulnerabilities/other/qdpm-info-leak.yaml to exposures/configs/qdpm-info-leak.yaml 2021-08-05 16:10:17 +05:30
nxnjz a7f75416f0
Update and rename appsec-yml-disclosure.yaml to appspec-yml-disclosure.yaml 2021-07-30 13:16:30 +03:00
Nicolas Mattiocco 8da48bbea8
Update git-config.yaml
improvement suggestion to keep it simple and flexible
2021-07-29 15:17:15 +02:00
sandeep e9210d80bf strict negative matchers 2021-07-26 15:14:33 +05:30
sandeep b990243906 uniform tags 2021-07-26 14:25:43 +05:30
sandeep c9f5f01bb9 minor update 2021-07-26 00:39:16 +05:30
Geeknik Labs 41c41abdb7
Update exposed-gitignore.yaml
Fixes the issue here: https://github.com/projectdiscovery/nuclei-templates/issues/1898#issuecomment-886237512
2021-07-25 18:29:28 +00:00
Sandeep Singh 4b444af3c4
Merge pull request #2125 from DhiyaneshGeek/master
17 New Templates Added
2021-07-24 03:26:09 +05:30
sandeep 1ea3b8a8bf matcher updates 2021-07-24 03:03:31 +05:30
sandeep 9788ebbf27 more matcher updates 2021-07-24 02:54:09 +05:30
sandeep 19533bcc08 removed content type check to avoid valid matches 2021-07-24 02:53:11 +05:30
Geeknik Labs 4795c084e1
Update nginx-config.yaml
fixes a false positive
2021-07-23 15:18:51 -05:00
sandeep 96c78d8695 additional negative matcher 2021-07-24 00:39:30 +05:30
sandeep 1f4f8ce332 matcher update 2021-07-24 00:30:53 +05:30
sandeep 840d3ee4e3 Update github-workflows-disclosure.yaml
removing content type check as this might miss valid results with no content type in response
2021-07-24 00:26:56 +05:30
Sandeep Singh b0b737e0eb
Update exposures/configs/hp-ilo-serial-key-disclosure.yaml
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-24 00:24:26 +05:30
Sandeep Singh 2dbeb70480
Update exposures/configs/github-workflows-disclosure.yaml
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-24 00:24:11 +05:30
Sandeep Singh fccc31717a
Update exposures/configs/github-workflows-disclosure.yaml
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-24 00:16:13 +05:30
sandeep 763591bc97 lint fixes 2021-07-24 00:12:28 +05:30
Dhiyaneshwaran 1d9979fead
Update exposures/configs/hp-ilo-serial-key-disclosure.yaml
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 17:54:36 +05:30
Dhiyaneshwaran 3528cd7bef
Update exposures/configs/github-workflows-disclosure.yaml
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 17:54:27 +05:30
Dhiyaneshwaran 62c2693d34
Update exposures/configs/appsec-yml-disclosure.yaml
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 17:54:17 +05:30
Dhiyaneshwaran 834d6b8f2a
Update dockerfile-hidden-disclosure.yaml 2021-07-23 17:49:32 +05:30
Dhiyaneshwaran 80b1205379
Update exposures/configs/kubernetes-kustomization-disclosure.yaml
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:45:58 +05:30
Dhiyaneshwaran a96c9c74c6
Update exposures/configs/kubernetes-kustomization-disclosure.yaml
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:45:52 +05:30
Dhiyaneshwaran 4051f03440
Update exposures/configs/kubernetes-kustomization-disclosure.yaml
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:45:44 +05:30
Dhiyaneshwaran 1646db1156
Update exposures/configs/hp-ilo-serial-key-disclosure.yaml
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:45:37 +05:30
Dhiyaneshwaran dd025100e7
Update exposures/configs/github-workflows-disclosure.yaml
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:45:30 +05:30
Dhiyaneshwaran ea45cdd369
Update exposures/configs/git-credentials-disclosure.yaml
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:44:54 +05:30
Dhiyaneshwaran 9271fa9492
Update exposures/configs/dockerfile-hidden-disclosure.yaml
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:44:47 +05:30
Dhiyaneshwaran 39f23522e4
Update exposures/configs/dockerfile-hidden-disclosure.yaml
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:44:38 +05:30
Dhiyaneshwaran 838002d77a
Update exposures/configs/appsec-yml-disclosure.yaml
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 09:44:23 +05:30
sandeep 7d72783090 WIP improvements 2021-07-22 16:32:37 +05:30
Dhiyaneshwaran 419456f277
Update kubernetes-kustomization-disclosure.yaml 2021-07-21 13:39:36 +05:30
Dhiyaneshwaran 6e76e533c8
Create kubernetes-kustomization-disclosure.yaml 2021-07-21 13:36:59 +05:30
Dhiyaneshwaran bf4d51136a
Create hp-ilo-serial-key-disclosure.yaml 2021-07-21 13:29:52 +05:30
Dhiyaneshwaran 15a19dea3d
Create github-workflows-disclosure.yaml 2021-07-21 13:21:05 +05:30
Dhiyaneshwaran 3425a83d38
Create git-credentials-disclosure.yaml 2021-07-21 11:19:35 +05:30
Dhiyaneshwaran 01bd0b38f4
Create dockerfile-hidden-disclosure.yaml 2021-07-21 11:13:50 +05:30
Dhiyaneshwaran 4f5a9f7d94
Create appsec-yml-disclosure.yaml 2021-07-21 11:09:04 +05:30
Philippe Delteil aec3d87e72
Update exposed-gitignore.yaml
New conditions to avoid false positives.
2021-07-17 23:15:08 -04:00
sandeep e232ba52d4 Added additional path 2021-07-14 18:24:26 +05:30
sandeep 950cc356ee path update 2021-07-14 17:39:50 +05:30
sandeep 367bfd4441 Added keycloak-openid-config 2021-07-14 17:38:01 +05:30
sandeep 7f1b075cf0 Temporally removing as matcher needs to be improved. 2021-07-11 13:37:39 +05:30
Sandeep Singh 72781f8dfa
Merge branch 'master' into master 2021-07-10 15:07:33 +05:30
sandeep a35c34127c Added content length condition 2021-07-10 00:40:09 +05:30
Sandeep Singh 684761587d
Merge pull request #1913 from projectdiscovery/exposed-gitignore
Added exposed-gitignore
2021-07-09 22:52:44 +05:30