This repository has been archived by the owner on Jun 5, 2022. It is now read-only.
-
-
Notifications
You must be signed in to change notification settings - Fork 64
/
Copy pathconfig-js.yaml
72 lines (69 loc) · 1.71 KB
/
config-js.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
id: config-js
info:
name: config.js
author: geeknik
severity: high
requests:
- method: GET
path:
- "{{BaseURL}}/config.js"
- "{{BaseURL}}/api/config.js"
- "{{BaseURL}}/app/config.js"
- "{{BaseURL}}/config/config.js"
- "{{BaseURL}}/web/config.js"
- "{{BaseURL}}/src/config.js"
- "{{BaseURL}}/src/api/config.js"
- "{{BaseURL}}/web/api/config.js"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "accessKey: "
- "secreKey: "
- "apiKey: "
- '"client_secret": '
- "mongodb+srv://"
condition: or
- type: word
part: header
words:
- "text/plain"
- "text/javascript"
- "application/javascript"
- "application/x-javascript"
condition: or
- type: word
part: header
words:
- "text/html"
negative: true
- type: word
part: body
words:
- "<html"
- "window.location = x"
- "can not find config.js"
- "function _popwnd_open"
- "window.dataLayer"
- "console.log("
- "window.location"
- "Unknown Host"
- "<h1"
- "Error 404: Error not found"
- "SERVICE_NOT_EXIST"
- "<p>"
- "Static content proxy"
- "ABORTED"
- "// Cedexis Inc."
- "This is a placeholder."
- "Counting any requests"
- ": 409,"
- "No action executes!"
condition: or
negative: true
- type: dsl
dsl:
- "len(body) > 50 && len(body) < 16384"