45 lines
1.2 KiB
YAML
45 lines
1.2 KiB
YAML
id: lesshst-history
|
|
|
|
info:
|
|
name: Less History - File Disclosure
|
|
author: kazet
|
|
severity: low
|
|
description: |
|
|
LESSHST file is a Less History File. LESSHST file is a Less History File. Less is a terminal pager program on Unix, Windows, and Unix-like systems used to view (but not change) the contents of a text file one screen at a time.
|
|
metadata:
|
|
verified: true
|
|
max-request: 1
|
|
shodan-query: html:"lesshst"
|
|
tags: misconfig,disclosure,config,files
|
|
|
|
http:
|
|
- method: GET
|
|
max-redirects: 1
|
|
path:
|
|
- "{{BaseURL}}/.lesshst"
|
|
|
|
matchers-condition: and
|
|
matchers:
|
|
- type: word
|
|
words:
|
|
- ".less-history-file:"
|
|
|
|
- type: word
|
|
part: response
|
|
words:
|
|
- "<?xml"
|
|
- "<env"
|
|
- "application/javascript"
|
|
- "application/json"
|
|
- "application/xml"
|
|
- "html>"
|
|
- "text/html"
|
|
- "image/"
|
|
negative: true
|
|
|
|
- type: status
|
|
status:
|
|
- 200
|
|
|
|
# digest: 4a0a00473045022049607106a435795b42000dd57a92535d56bcc5b0a2d49c269d56291f53b187a6022100ce87a038c672b98db6e9a3420a016b9da270b511e3ed7b1a50dd466b05830c07:922c64590222798bb761d5b6d8e72950
|