nuclei-templates/http/exposures/configs/rakefile-disclosure.yaml

45 lines
1.1 KiB
YAML

id: rakefile-disclosure
info:
name: Rakefile - File Disclosure
author: DhiyaneshDK
severity: info
description: |
Rakefile configuration file was detected.
reference:
- https://ruby.github.io/rake/doc/rakefile_rdoc.html
metadata:
verified: true
max-request: 1
shodan-query: html:"Rakefile"
product: ruby
vendor: ruby-lang
tags: devops,exposure,rakefile,config,ruby,rails
classification:
cpe: cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*
http:
- method: GET
path:
- "{{BaseURL}}/Rakefile"
matchers-condition: or
matchers:
- type: word
part: body
words:
- 'application.load_tasks'
- 'config/application'
condition: and
case-insensitive: true
- type: word
part: body
words:
- 'require'
- 'desc'
- 'task :'
condition: and
# digest: 490a00463044022006d1348a9ef873df72d1fb2c0826d6d4ab59cae528ffd3b606b12acb7cd446d402206735a2059c2232203e2902431481d570b764b24f0dac6abcabd0507111b0c262:922c64590222798bb761d5b6d8e72950