Zend Configuration File

ID: zend-config-file

Severity: high

Author: pdteam,geeknik,Akokonunes

Tags: config,exposure,zend,php

Description

Zend configuration file was exposed.

YAML Source

id: zend-config-file

info:
  name: Zend Configuration File
  author: pdteam,geeknik,Akokonunes
  severity: high
  description: Zend configuration file was exposed.
  metadata:
    max-request: 13
  tags: config,exposure,zend,php

http:
  - method: GET
    path:
      - "{{BaseURL}}{{paths}}"
    payloads:
      paths:
        - "/application/configs/application.ini"
        - "/admin/configs/application.ini"
        - "/application.ini"
        - "/aplicacao/application/configs/application.ini"
        - "/cloudexp/application/configs/application.ini"
        - "/cms/application/configs/application.ini"
        - "/moto/application/configs/application.ini"
        - "/Partners/application/configs/application.ini"
        - "/radio/application/configs/application.ini"
        - "/seminovos/application/configs/application.ini"
        - "/shop/application/configs/application.ini"
        - "/site_cg/application/configs/application.ini"
        - "/slr/application/configs/application.ini"

    stop-at-first-match: true

    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - "db.*(.password).*="
          - "db.*(.username).*="
        condition: and

      - type: word
        words:
          - "text/plain"
        part: header

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100f48b78dc3b1b946ce976701018da492e6b671cf6b5140f2f78fdafc23a76f4ef022100e5488f8445b12e4e22035b59612dcbf076fdba6a25e5255d82e02cde62567091:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/exposures/configs/zend-config-file.yaml"

View on Github