Skip to content

Msmtp - Config Exposure

ID: msmtp-config

Severity: high

Author: geeknik

Tags: exposure,msmtp

Msmtp configuration was discovered.

id: msmtp-config
info:
name: Msmtp - Config Exposure
author: geeknik
severity: high
description: Msmtp configuration was discovered.
reference:
- https://wiki.archlinux.org/title/Msmtp
metadata:
verified: true
max-request: 1
tags: exposure,msmtp
http:
- method: GET
path:
- "{{BaseURL}}/.msmtprc"
matchers-condition: and
matchers:
- type: word
words:
- 'account'
- 'host'
- 'from'
- 'auth'
- 'tls'
condition: and
- type: word
part: header
words:
- 'text/plain'
- 'octet-stream'
condition: or
- type: status
status:
- 200
# digest: 490a00463044022034c8ce4722d2e271109579caea7d2a843199ab9fbd9523766515127591b92e15022051dc891078c641fc7737ba29d93f9399f3a6f7d7dd7a092da9740aac85abdc6f:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/exposures/configs/msmtp-config.yaml"

View on Github