nuclei-templates/http/misconfiguration/private-key-exposure.yaml

28 lines
613 B
YAML

id: private-key-exposure
info:
name: Private key exposure via helper detector
author: aashiq
severity: high
description: Searches for private key exposure by attempting to query the helper endpoint on node_modules
metadata:
max-request: 1
tags: exposure,node,misconfig
http:
- method: GET
path:
- "{{BaseURL}}/node_modules/mqtt/test/helpers/"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "Index of /node_modules/mqtt/test/helpers"
- "Parent Directory"
condition: and