nuclei-templates/http/misconfiguration/corebos-htaccess.yaml

37 lines
1009 B
YAML

id: corebos-htaccess
info:
name: CoreBos - .htaccess File Exposure
author: arafatansari
severity: info
description: |
CoreBos was discovered to have .htaccess file exposed to public which includes sensitive information.
reference:
- https://huntr.dev/bounties/5b0fe6e3-4ca1-44ae-8875-d7e6c065432e/
metadata:
verified: true
max-request: 1
shodan-query: http.html:"corebos"
product: corebos
vendor: corebos
fofa-query: body="corebos"
tags: exposure,corebos,huntr,misconfig
http:
- method: GET
path:
- '{{BaseURL}}/htaccess.txt'
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'Options -Indexes'
- '<FilesMatch'
condition: and
- type: status
status:
- 200
# digest: 4a0a00473045022100b92b99b2997663f31019976b6e9c89a9636fe237dce5ddbd7d66bdcaf9807bea0220208dc66c74b37934aef853dcd2168c22e6b2e60dd93a5d8e08969f25ccbf4f58:922c64590222798bb761d5b6d8e72950