Web Source Code Enumeration via .git

Averroes · Jun 9, 2019 · eae7e3a · eae7e3a
1 parent 407d821
commit eae7e3a
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/rules/web/web_source_code_enumeration.yml b/rules/web/web_source_code_enumeration.yml
@@ -0,0 +1,20 @@
+title: Source Code Enumeration Detection by Keyword
+description: Detects source code enumeration that use GET requests by keyword searches in URL strings
+author: James Ahearn
+references: 
+    - 'https://pentester.land/tutorials/2018/10/25/source-code-disclosure-via-exposed-git-folder.html'
+    - 'https://medium.com/@logicbomb_1/bugbounty-how-i-was-able-to-download-the-source-code-of-indias-largest-telecom-service-52cf5c5640a1'
+logsource:
+    category: webserver
+detection:
+    keywords:
+        - '*.git/*'
+    condition: keywords
+fields:
+    - client_ip
+    - vhost
+    - url
+    - response
+falsepositives:
+    - unknown
+level: medium