id: exposed-vscode

info:
  name: Exposed VSCode Folders
  author: aashiq
  severity: low
  description: Searches for exposed Visual Studio Code Directories by querying the /.vscode endpoint and existence of "index of" in the body
  tags: vscode,exposure

requests:
  - method: GET
    path:
      - "{{BaseURL}}/.vscode/"
    matchers:
      - type: word
        words:
          - "Index of /.vscode"
        part: body