provider.json

[
    {
        "vulnerability": "PHP info is publicly viewable",
        "method": "GET",
        "color": "blue",
        "body": "",
        "endpoint": [
            "/php.php",
            "/phpinfo.php",
            "/info.php",
            "/_profiler/phpinfo",
            "/infophp.php",
            "/php_info.php",
            "/test.php",
            "/i.php",
            "/asdf.php",
            "/pinfo.php",
            "/phpversion.php",
            "/time.php"
        ],
        "headers": [],
        "checkIn": "responseBody",
        "checkFor": "PHP Version&&&&PHP API&&&&PHP Extension"
    },
    {
        "vulnerability": "WP-Config Exposed",
        "method": "GET",
        "color": "red",
        "body": "",
        "endpoint": [
            "/wp-config.php~",
            "/wp-config.php.save",
            "/wp-config.php_bak",
            "/wp-config.php.bak",
            "/wp-config.php.old",
            "/wp-config.php.orig",
            "/wp-config.php.original"
        ],
        "headers": [],
        "checkIn": "responseBody",
        "checkFor": "DB_USER"
    },
    {
        "vulnerability": "Server status is publicly viewable",
        "method": "GET",
        "color": "blue",
        "body": "",
        "endpoint": [
            "/server-status"
        ],
        "headers": [],
        "checkIn": "responseBody",
        "checkFor": "CPU Usage&&&&Server Version&&&&Apache Server Status"
    },    
    {
        "vulnerability": "Tomcat Server status is publicly viewable",
        "method": "GET",
        "color": "blue",
        "body": "",
        "endpoint": [
            "/status?full=true"
        ],
        "headers": [],
        "checkIn": "responseBody",
        "checkFor": "Current thread count"
    },
    {
        "vulnerability": ".git Exposed publicly",
        "method": "GET",
        "color": "red",
        "body": "",
        "endpoint": [
            "/.git/config"
        ],
        "headers": [],
        "checkIn": "responseBody",
        "checkFor": "[core]"
    },
    {
        "vulnerability": "Rails Database Config file",
        "method": "GET",
        "color": "red",
        "body": "",
        "endpoint": [
            "/config/database.yml"
        ],
        "headers": [],
        "checkIn": "responseBody",
        "checkFor": "adapter:&&&&database:"
    },
    {
        "vulnerability": "Magento Config",
        "method": "GET",
        "color": "red",
        "body": "",
        "endpoint": [
            "/app/etc/local.xml",
            "/store/app/etc/local.xml"
        ],
        "headers": [],
        "checkIn": "responseBody",
        "checkFor": "<config&&&&Mage"
    },   
   {
        "vulnerability": ".env file detected",
        "method": "GET",
        "color": "blue",
        "body": "",
        "endpoint": [
            "/.env"
        ],
        "headers": [],
        "checkIn": "responseBody",
        "checkFor": "APP_ENV=||||DB_PASSWORD="
    },
    {
        "vulnerability": "Directory Listing Enabled",
        "method": "GET",
        "color": "blue",
        "body": "",
        "endpoint": [
            "/"
        ],
        "headers": [],
        "checkIn": "responseBody",
        "checkFor": "<title>Directory listing for ||||<title>Index of "
    }
]