nuclei-templates/exposures/files/php-user-ini-disclosure.yaml

32 lines
649 B
YAML

id: php-user-ini-disclosure
info:
name: Php User.ini Disclosure
author: dhiyaneshDk
severity: medium
reference: https://github.com/detectify/ugly-duckling/blob/master/modules/crowdsourced/php-user-ini-disclosure.json
tags: exposure,config
requests:
- method: GET
path:
- "{{BaseURL}}/user.ini"
- "{{BaseURL}}/.user.ini"
matchers-condition: and
matchers:
- type: word
words:
- "assert"
- "highlight"
- "opcache"
- "mssql"
- "oci8"
- "agent"
part: body
condition: and
- type: status
status:
- 200