Skip to content

Global Privacy Control (GPC) File Disclosure

ID: gpc-json

Severity: info

Author: MihhailSokolov

Tags: miscellaneous,misc,generic,gpc

The website defines a Global Privacy Control policy.

id: gpc-json
info:
name: Global Privacy Control (GPC) File Disclosure
author: MihhailSokolov
severity: info
description: |
The website defines a Global Privacy Control policy.
metadata:
verified: true
max-request: 2
tags: miscellaneous,misc,generic,gpc
http:
- method: GET
path:
- "{{RootURL}}/.well-known/gpc.json"
- "{{RootURL}}/gpc.json"
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
words:
- '"gpc"'
- type: status
status:
- 200
- type: dsl
dsl:
- "len(body) <= 1024 && len(body) > 0"
extractors:
- type: json
part: body
name: gpc-version
json:
- ".version?"
# digest: 4b0a00483046022100d8fd1a6bb7f13d6085bd8086b2386ed6a21266d88fc63b593834c106d1c38e54022100b8cf4d4361c73fb157eb6b820de127a180d55fb11d1f46239decf71676512da4:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/miscellaneous/gpc-json.yaml"

View on Github