Skip to content

Sass Lint File Exposure

ID: sass-lint

Severity: info

Author: DhiyaneshDK

Tags: exposure,sass,devops,cicd,files

id: sass-lint
info:
name: Sass Lint File Exposure
author: DhiyaneshDK
severity: info
reference:
- https://github.com/sasstools/sass-lint/blob/develop/docs/sass-lint.yml
metadata:
verified: true
max-request: 1
shodan-query: html:"sass-lint.yml"
tags: exposure,sass,devops,cicd,files
http:
- method: GET
path:
- "{{BaseURL}}/.sass-lint.yml"
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'options:'
- 'formatter:'
- 'files:'
condition: and
- type: status
status:
- 200
# digest: 4b0a00483046022100d43f2e635596dee2aae0114fb3924dc9cdbc9fda0c90151efe2ed9ccd38bc228022100ee58f35b536a58313a664b63bb086d8a6cf16e05fea069d7a5c7dbb3604fc6c3:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/exposures/files/sass-lint.yaml"

View on Github