5f7519a89a
add template for .idea files with sensitive data
2021-10-20 22:13:41 +02:00
ccc026ac70
Update github-workflows-disclosure.yaml
...
Might expose a SNYK_TOKEN
2021-10-20 13:44:17 -05:00
ecdb28d826
Add jetbrains datasource exposure check
2021-10-20 19:14:25 +02:00
9ded2fcccf
Add Gruntfile Expose Test
...
Gruntfile can include secrets or other information that helps find
further vulnerabilities.
2021-10-20 19:05:54 +02:00
0152a2c355
Merge pull request #2917 from geeknik/patch-36
...
Create prometheus-config-endpoint.yaml
2021-10-19 22:28:09 +05:30
e2a074730e
Merge pull request #2919 from geeknik/patch-37
...
Create prometheus-flags-endpoint.yaml
2021-10-19 22:27:39 +05:30
c0857e0ab6
Merge pull request #2920 from geeknik/patch-38
...
Create prometheus-targets-endpoint.yaml
2021-10-19 22:27:23 +05:30
8a69822285
Update prometheus-config-endpoint.yaml
2021-10-19 22:26:52 +05:30
1d70ac6ccb
Update prometheus-flags-endpoint.yaml
2021-10-19 22:26:31 +05:30
a25a9f3020
Update prometheus-targets-endpoint.yaml
2021-10-19 22:25:44 +05:30
6d13118df6
Update prometheus-targets-endpoint.yaml
2021-10-19 20:35:34 +05:30
2893847959
Update prometheus-flags-endpoint.yaml
2021-10-19 20:34:13 +05:30
8d36ebe1d6
Update prometheus-config-endpoint.yaml
2021-10-19 20:32:48 +05:30
10c2314367
Update prometheus-flags-endpoint.yaml
2021-10-19 20:32:37 +05:30
7016e71473
Update prometheus-config-endpoint.yaml
2021-10-19 20:27:46 +05:30
667ee78cb5
Update sensitive-storage-exposure.yaml
2021-10-18 23:09:27 -03:00
c9f2ef68ed
Update prometheus-config-endpoint.yaml
2021-10-18 17:28:10 -05:00
eac799774d
Update prometheus-flags-endpoint.yaml
2021-10-18 14:36:49 -05:00
86a8332187
Update prometheus-flags-endpoint.yaml
...
adding regex extractor to alert if `optional` Prometheus management API is enabled as per the linked reference article. 👍🏻
2021-10-18 13:51:11 -05:00
72805491d0
Create prometheus-targets-endpoint.yaml
2021-10-18 13:44:55 -05:00
0f20469e96
Update prometheus-flags-endpoint.yaml
2021-10-18 13:43:36 -05:00
a8a063d14c
Create prometheus-flags-endpoint.yaml
2021-10-18 13:36:27 -05:00
c7efad4b58
Create prometheus-config-endpoint.yaml
2021-10-18 13:35:04 -05:00
aec00d0d11
add more tags to keycloak json file template
2021-10-18 13:38:04 -03:00
233ca1fef9
improved regex to handle more cases
2021-10-13 11:53:02 +05:30
a476fc9ca4
Update laravel-env.yaml
...
added case insensitivity to the regex matcher
2021-10-08 11:30:44 -05:00
4d52f354ee
Merge pull request #2853 from pdelteil/patch-66
...
Update zend-config-file.yaml
2021-10-08 19:15:45 +05:30
8960821db1
Update zend-config-file.yaml
2021-10-08 19:15:26 +05:30
976f695929
Update zend-config-file.yaml
2021-10-08 03:53:52 -03:00
589a1c16ee
Update github-workflows-disclosure.yaml
2021-10-07 16:51:45 -05:00
793f3474b0
Update github-workflows-disclosure.yaml
...
Add new paths
2021-10-07 16:50:57 -05:00
5b5e764b48
Merge pull request #2787 from mr-rizwan-syed/master
...
wp-config-file and aws-s3-access-key-leak
2021-10-05 18:25:04 +05:30
5c4dd11b6b
Rename misconfiguration/wpconfig-aws-keys.yaml to exposures/configs/wpconfig-aws-keys.yaml
2021-10-05 18:20:43 +05:30
56c8c36ef2
Merge pull request #2802 from geeknik/patch-32
...
Create axiom-digitalocean-key-exposure.yaml
2021-10-05 09:34:53 +05:30
74f0620a9f
Update axiom-digitalocean-key-exposure.yaml
2021-10-04 22:09:12 +05:30
5618fcaa7e
Update axiom-digitalocean-key-exposure.yaml
2021-10-02 04:41:32 +05:30
e08ccf85db
adding missing condition
2021-10-02 04:37:10 +05:30
2327224260
Update axiom-digitalocean-key-exposure.yaml
2021-10-01 13:22:35 -05:00
bdbf73cd34
Update tugboat-config-exposure.yaml
2021-10-01 13:21:58 -05:00
ec88d62ad4
Create axiom-digitalocean-key-exposure.yaml
...
create axiom-digitalocean-key-exposure.yaml
2021-10-01 13:20:23 -05:00
c05df76ed2
Create tugboat-config-exposure.yaml
...
Create tugboat-config-exposure.yaml
2021-10-01 13:13:35 -05:00
807920c0ac
clean-up
2021-09-21 17:16:53 +05:30
cf0edc490a
Rename crossdomin-xml.yaml to crossdomain-xml.yaml
2021-09-20 23:28:06 +05:30
8eea40d15c
Update php-warning.yaml
...
Additional status matcher
2021-09-17 13:07:59 -05:00
2cce7831a6
Update php-warning.yaml
...
Fixes #2705
2021-09-17 13:04:07 -05:00
ab4e6a4dd6
Merge pull request #2696 from DhiyaneshGeek/master
...
New Templates Added
2021-09-17 16:29:58 +05:30
5858e3a01c
Update and rename exposures/logs/database-error.yaml to misconfiguration/database-error.yaml
2021-09-17 13:33:54 +05:30
156daddde0
Update phpinfo.yaml
2021-09-17 13:20:06 +05:30
0b7c12951c
Update php-warning.yaml
2021-09-17 13:13:40 +05:30
52162716e5
Update and rename exposures/logs/zabbix-error.yaml to misconfiguration/zabbix-error.yaml
2021-09-17 13:00:35 +05:30
a3ce6426f6
Update database-error.yaml
2021-09-17 12:46:35 +05:30
24b40f5f5d
Update phpinfo.yaml
2021-09-17 08:19:28 +05:30
8554474fd2
Create database-error.yaml
2021-09-17 08:14:18 +05:30
4959b99a7d
Create zabbix-error.yaml
2021-09-17 08:11:38 +05:30
320c973288
Create php-warning.yaml
2021-09-17 08:07:18 +05:30
f47c4da9e8
Merge pull request #2694 from geeknik/geeknik-patch-1
...
MIscellaneous updates
2021-09-17 02:22:26 +05:30
f0cac598cb
misc update
2021-09-17 02:18:04 +05:30
56590675cf
Update squid-analysis-report-generator.yaml
2021-09-16 15:16:26 -05:00
95664dfc18
Update credentials-disclosure.yaml
2021-09-16 15:13:12 -05:00
42e644b7fd
Update bower-json.yaml
2021-09-16 15:11:24 -05:00
cb80cbb537
Create dsm-terminator-error.yaml
2021-09-14 22:46:01 +05:30
c225428932
Create struts-problem-report.yaml
2021-09-14 22:30:18 +05:30
be24688a48
Create error-processing.yaml
2021-09-14 21:49:36 +05:30
bd24dc198e
Coverage for all templates using tags
2021-09-09 19:08:13 +05:30
609705f676
removed extra headers not required for template
2021-09-08 17:47:19 +05:30
ef1f7c5e92
Updates across many templates for clarity, spelling, and grammar.
2021-09-05 17:13:45 -04:00
cdd022c29d
Merge pull request #2550 from projectdiscovery/adding-sfm
...
Added stop-at-first-match in applicable templates
2021-09-02 23:09:21 +05:30
8b37808730
misc update
2021-09-02 22:57:55 +05:30
5414f9a618
Update general-tokens.yaml
2021-09-02 10:36:46 -05:00
c266084621
Added stop-at-first-match in applicable templates
2021-09-02 17:29:10 +05:30
0d1d2b3b1b
Merge pull request #2512 from DhiyaneshGeek/master
...
Webpack Sourcemap Disclosure
2021-09-02 00:34:56 +05:30
aeac5bbec3
misc update
2021-08-31 01:03:44 +05:30
7608386bb3
Update dbeaver-credentials.yaml
2021-08-30 15:24:34 +05:30
7a9093c8a7
Update dbeaver-credentials.yaml
...
Change solve the false positives due to {} (empty response)
Example
nuclei -t nuclei-templates/exposures/configs/dbeaver-credentials.yaml -u https://lbs.map.qq.com
2021-08-30 02:55:35 -04:00
8c1de71ec9
wip - update
2021-08-29 18:50:29 +05:30
6bade73727
Create webpack-sourcemap-disclosure.yaml
2021-08-29 17:13:44 +05:30
a4250b8f2f
Merge remote-tracking branch 'origin' into dynamic_attributes
2021-08-26 15:04:14 +03:00
39ce8ee5b2
misc updates
2021-08-26 15:03:35 +05:30
1685ce08b0
Apache Axis 1 and 2 templates
2021-08-26 02:11:02 +00:00
ee49f89109
misc update
2021-08-26 03:51:35 +05:30
0d3d9a37d9
misc update
2021-08-26 03:47:32 +05:30
ce1daa8c80
Update glpi-status-ldap-domain-disclosure.yaml
2021-08-26 03:42:53 +05:30
22d0b35775
GLPI detection, status and telemetry exposure
2021-08-25 21:55:22 +00:00
110f9c9ddd
Merge remote-tracking branch 'origin' into dynamic_attributes
2021-08-24 20:38:11 +03:00
ae0aabd905
misc update
2021-08-24 02:50:14 +05:30
a124e393b4
Merge remote-tracking branch 'origin' into dynamic_attributes
2021-08-23 19:15:14 +03:00
647d27925a
Merge pull request #2426 from projectdiscovery/generic
...
Templates by geeknik
2021-08-23 19:55:32 +05:30
b5ec33e4c0
Update dockercfg-config.yaml
2021-08-23 19:52:39 +05:30
1def46a72e
Update firebase-config-exposure.yaml
2021-08-23 15:11:10 +05:30
93894d5b8c
Update dbeaver-credentials.yaml
2021-08-23 15:09:33 +05:30
43fe743729
Update and rename dockercfg.yaml to dockercfg-config.yaml
2021-08-23 15:07:02 +05:30
e160acb481
misc updates
2021-08-20 16:37:22 +05:30
77103bc629
Satisfying the linter (all errors and warnings)
...
* whitespace modifications only
2021-08-19 17:44:46 +03:00
002e8db616
Moved the "vendor" custom attribute under reference
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 17:00:46 +03:00
f55d6b75e1
Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 16:59:12 +03:00
7b29be739e
Merge branch 'master' into dynamic_attributes
2021-08-19 16:23:26 +03:00
0b432b341b
Added comments with URLs under the "references" field
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 16:15:35 +03:00
e68d15ab63
Fixed mistakes/typos in the templates.
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 15:30:14 +03:00
f65a78bb5c
Create firebase-config-exposure.yaml
2021-08-19 16:56:13 +05:30
acbacf339d
Update dockercfg.yaml
2021-08-19 16:48:50 +05:30
2e4c8e22f2
Create dockercfg.yaml
2021-08-19 16:47:22 +05:30
d7e7c39982
Update dbeaver-credentials.yaml
2021-08-19 16:34:32 +05:30
c980eea40b
Create dbeaver-credentials.yaml
2021-08-19 16:32:09 +05:30
760af33ce9
Update db-schema.yaml
2021-08-19 15:03:10 +05:30
4c27b5d5ee
Create db-schema.yaml
2021-08-19 15:00:00 +05:30
20e66005b7
Update and rename couchbase-buckets-rest-api.yaml to couchbase-buckets-api.yaml
2021-08-19 14:57:01 +05:30
d10c81b2ba
Create couchbase-buckets-rest-api.yaml
2021-08-19 14:56:35 +05:30
4d9bd2d13b
Update zend-config-file.yaml
2021-08-19 14:27:45 +05:30
cdf9451158
Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-18 14:44:27 +03:00
4c920b2552
Rename "references" to "reference" to match the expected template info structure
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-18 14:29:20 +03:00
5b17aea895
Merge pull request #2388 from geeknik/patch-17
...
Update general-tokens.yaml
2021-08-17 22:34:03 +05:30
5c994cfad6
Update general-tokens.yaml
...
I believe this might work.
2021-08-17 11:52:31 -05:00
9850ced093
strict matchers
2021-08-17 22:11:28 +05:30
5e55dc1e24
Create django-debug-exposure.yaml
2021-08-17 17:37:57 +05:30
51b15ff0d4
severity update
2021-08-14 17:28:23 +05:30
ffcfaa5cb1
minor update
2021-08-14 16:51:20 +05:30
739622c7ab
Merge pull request #2394 from gabrielb3lmont/exposures_templates
...
Added crossdomain-xml Template
2021-08-14 15:46:53 +05:30
77f59df9c8
Update crossdomin-xml.yaml
2021-08-14 15:45:34 +05:30
d13bc82a2e
Update crossdomin-xml.yaml
2021-08-14 14:42:16 +05:30
3183242eb3
Merge pull request #2366 from pikpikcu/patch-250
...
Create iceflow-vpn-disclosure
2021-08-14 14:37:09 +05:30
9c51bc0abb
Update iceflow-vpn-disclosure.yaml
2021-08-14 14:35:41 +05:30
6b65897dd9
Update iceflow-vpn-disclosure.yaml
2021-08-14 14:30:29 +05:30
e6d9a1ec90
Fixed crossdomain-xml template
2021-08-13 11:25:10 -07:00
126e27e3b2
Added crossdomain-xml Template
2021-08-13 10:49:41 -07:00
c9daa11bd8
Update general-tokens.yaml
2021-08-12 09:54:57 -05:00
166049bf0b
Update general-tokens.yaml
...
more FP work
2021-08-12 09:53:33 -05:00
68dad33565
Merge pull request #2365 from daffainfo/patch-144
...
Update laravel-env.yaml
2021-08-12 18:48:11 +05:30
39e0fd7c54
Update general-tokens.yaml
...
Nuking more false positives
2021-08-12 07:55:11 -05:00
ca3af4527d
Update iceflow-vpn-disclosure.yaml
2021-08-10 14:31:05 +07:00
2956610eab
Create iceflow-vpn-disclosure.yaml
2021-08-10 10:02:17 +07:00
999a8febb9
Update laravel-env.yaml
2021-08-10 09:54:37 +07:00
a6e3a6a458
Merge branch 'master' into master
2021-08-09 16:09:41 +05:30
8ab6fc07bc
Update laravel-env.yaml
...
added new path
2021-08-09 13:43:29 +07:00
b86e8eabf9
Update codeigniter-env.yaml
2021-08-08 01:22:58 +05:30
a5500cca02
Additional optional matcher
2021-08-08 01:19:15 +05:30
5767a0d5a2
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates into pr/1241
2021-08-08 01:13:41 +05:30
b111aeadc3
Update laravel-env.yaml
2021-08-08 01:11:14 +05:30
31a77d4e02
Update symfony-profiler.yaml
2021-08-07 09:19:05 +07:00
f01678b9c6
Update symfony-database-config.yaml
2021-08-07 09:18:02 +07:00
685183858e
minor update
2021-08-06 23:35:35 +05:30
30c5d2c3b8
Update ruijie-eg-password-leak.yaml
2021-08-06 23:07:27 +05:30
6a3a7ae691
password extractor
2021-08-06 23:04:32 +05:30
fc1af10daa
Added ruijie-eg-password-leak
2021-08-06 22:42:41 +05:30
5952685f5c
Create ruijie-nbr1300g-cli-password-leak.yaml
2021-08-06 17:46:57 +07:00
24efdfd678
Update qdpm-info-leak.yaml
2021-08-05 16:17:30 +05:30
8e0a730e3d
Rename vulnerabilities/other/qdpm-info-leak.yaml to exposures/configs/qdpm-info-leak.yaml
2021-08-05 16:10:17 +05:30
a02ae7bef7
Update general-tokens.yaml
2021-08-02 12:27:07 -05:00
61bb675add
Update general-tokens.yaml
...
squashing false positives
2021-08-02 12:25:54 -05:00
3c713144d4
Update general-tokens.yaml
...
fix more fp
2021-08-02 10:17:06 -05:00
162cf14687
Merge pull request #782 from hahwul/master
...
Create github-page-files.yml
2021-07-30 18:15:28 +05:30
martincodes
Geeknik Labs
Florian Maak
Sufijen Bani
Prince Chaddha
Prince Chaddha
Philippe Delteil
opp?
sandeep
Dhiyaneshwaran
sullo
forgedhallpass
Douglas Santos
LogicalHunter
PikPikcU
Muhammad Daffa
adriyansyah-mf