nuclei-templates/exposures/logs/error-logs.yaml

58 lines
1.5 KiB
YAML

id: error-logs
info:
name: common error log files
author: geeknik,daffainfo
severity: low
tags: logs,exposure
requests:
- method: GET
path:
- "{{BaseURL}}/routes/error_log"
- "{{BaseURL}}/config/error_log"
- "{{BaseURL}}/error_log"
- "{{BaseURL}}/errors_log"
- "{{BaseURL}}/logs/error.log"
- "{{BaseURL}}/logs/errors.log"
- "{{BaseURL}}/log/error.log"
- "{{BaseURL}}/log/errors.log"
- "{{BaseURL}}/errors/errors.log"
- "{{BaseURL}}/error/error.log"
- "{{BaseURL}}/errors.log"
- "{{BaseURL}}/error.log"
- "{{BaseURL}}/error.txt"
- "{{BaseURL}}/errors.txt"
- "{{BaseURL}}/admin/logs/error.log"
- "{{BaseURL}}/admin/logs/errors.log"
- "{{BaseURL}}/admin/log/error.log"
- "{{BaseURL}}/admin/error.log"
- "{{BaseURL}}/admin/errors.log"
- "{{BaseURL}}/{{Hostname}}/error.log"
- "{{BaseURL}}/{{Hostname}}/errors.log"
- "{{BaseURL}}/MyErrors.log"
- "{{BaseURL}}/log.txt"
- "{{BaseURL}}/logs.txt"
- "{{BaseURL}}/log.log"
- "{{BaseURL}}/application/logs/application.log"
- "{{BaseURL}}/application/logs/default.log"
matchers-condition: and
matchers:
- type: word
words:
- "Segmentation Fault"
- "coredump"
- "script headers"
- "Broken pipe"
- "Array"
condition: or
- type: word
words:
- text/plain
part: header
- type: status
status:
- 200