Gitignore Config - Detect

ID: exposed-gitignore

Severity: info

Author: TheZakMan,geeknik

Tags: exposure,tenable,config,git

Description

Gitignore configuration information was detected.

YAML Source

id: exposed-gitignore

info:
  name: Gitignore Config - Detect
  author: TheZakMan,geeknik
  severity: info
  description: Gitignore configuration information was detected.
  reference:
    - https://twitter.com/pratiky9967/status/1230001391701086208
    - https://www.tenable.com/plugins/was/98595
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
    max-request: 3
  tags: exposure,tenable,config,git

http:
  - method: GET
    path:
      - "{{BaseURL}}/.gitignore"
      - "{{BaseURL}}/assets/.gitignore"
      - "{{BaseURL}}/includes/.gitignore"

    matchers-condition: and
    matchers:
      - type: dsl
        dsl:
          - 'len(body) > 50'
          - 'status_code == 200'
        condition: and

      - type: word
        words:
          - "MongoDB over HTTP on the native"
          - "application/javascript"
          - "application/x-javascript"
          - "application/json"
          - "application/xml"
          - "text/xml"
          - "html"
          - "<!doctype"
          - "<script"
          - "<meta"
          - "image/"
          - "Response xmlns"
        part: response
        negative: true
        condition: or
# digest: 490a00463044022013af63b0668cb2e89ed0ca5c323b34444d6660a8983bdeaedef72ddbd6248ccb02204590f8da7ce9b2b6b31ab70909bdf9e4dddebe1337e7807818e5c5bd22130abf:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/exposures/configs/exposed-gitignore.yaml"

View on Github