id: idea-folder-exposure

info:
  name: Public .idea Folder containing files with sensitive data
  author: martincodes-de
  severity: info
  description: Searches for .idea Folder by querying the /.idea and a few other files with sensitive data.
  metadata:
    max-request: 2
  tags: phpstorm,jetbrains,idea,exposure,files

http:
  - method: GET
    path:
      - "{{BaseURL}}/.idea/deployment.xml"
      - "{{BaseURL}}/.idea/workspace.xml"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "<?xml version="
          - "<project version"
        part: body
        condition: and

# digest: 4b0a00483046022100a14970cfece0bda661843cc33851c7c976507f74efa5661195654e3545a43836022100f1eba3263a8f047ed02c74bfa808baf47811e9b6186deb27bcd2821e4e63a8a3:922c64590222798bb761d5b6d8e72950