id: front-page-misconfig

info:
  name: FrontPage configuration information discloure
  author: JTeles
  severity: info

  # Reference: https://docs.microsoft.com/en-us/archive/blogs/fabdulwahab/security-protecting-sharepoint-server-applications

requests:
  - method: GET
    path:
      - "{{BaseURL}}/_vti_inf.html"
    matchers:
      - type: size
        size:
          - 247