Change status for old rules

This commit is contained in:
frack113
2021-11-27 11:33:14 +01:00
parent 6664d6e522
commit 01dc930c17
547 changed files with 11964 additions and 11755 deletions
+16 -16
View File
@@ -1,27 +1,27 @@
title: Source Code Enumeration Detection by Keyword
id: 953d460b-f810-420a-97a2-cfca4c98e602
status: experimental
status: test
description: Detects source code enumeration that use GET requests by keyword searches in URL strings
author: James Ahearn
date: 2019/06/08
modified: 2020/09/03
references:
- https://pentester.land/tutorials/2018/10/25/source-code-disclosure-via-exposed-git-folder.html
- https://medium.com/@logicbomb_1/bugbounty-how-i-was-able-to-download-the-source-code-of-indias-largest-telecom-service-52cf5c5640a1
- https://pentester.land/tutorials/2018/10/25/source-code-disclosure-via-exposed-git-folder.html
- https://medium.com/@logicbomb_1/bugbounty-how-i-was-able-to-download-the-source-code-of-indias-largest-telecom-service-52cf5c5640a1
date: 2019/06/08
modified: 2021/11/27
logsource:
category: webserver
category: webserver
detection:
keywords:
- '*.git/*'
condition: keywords
keywords:
- '*.git/*'
condition: keywords
fields:
- client_ip
- vhost
- url
- response
- client_ip
- vhost
- url
- response
falsepositives:
- unknown
- unknown
level: medium
tags:
- attack.discovery
- attack.t1083
- attack.discovery
- attack.t1083