id: thumbs-db-disclosure info: name: Thumbs DB Disclosure author: dhiyaneshDk severity: info reference: - https://github.com/detectify/ugly-duckling/blob/master/modules/crowdsourced/thumbs-db-disclosure.json tags: exposure,files requests: - method: GET path: - "{{BaseURL}}/Thumbs.db" matchers-condition: and matchers: - type: binary binary: - 'D0CF11E0A1B11AE1' part: body - type: status status: - 200