application-ini.yaml

id: application-ini

info:
  name: Discover Zend Framework application.ini files
  reference: https://github.com/feibeck/application.ini/blob/master/application.ini
  author: geeknik
  severity: high

requests:
  - method: GET
    path:
      - "{{BaseURL}}/admin/configs/application.ini"
      - "{{BaseURL}}/application.ini"
      - "{{BaseURL}}/aplicacao/application/configs/application.ini"
      - "{{BaseURL}}/application/configs/application.ini"
      - "{{BaseURL}}/cloudexp/application/configs/application.ini"
      - "{{BaseURL}}/cms/application/configs/application.ini"
      - "{{BaseURL}}/moto/application/configs/application.ini"
      - "{{BaseURL}}/Partners/application/configs/application.ini"
      - "{{BaseURL}}/radio/application/configs/application.ini"
      - "{{BaseURL}}/seminovos/application/configs/application.ini"
      - "{{BaseURL}}/shop/application/configs/application.ini"
      - "{{BaseURL}}/site_cg/application/configs/application.ini"
      - "{{BaseURL}}/slr/application/configs/application.ini"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "php"
          - "resources"
        condition: and
      - type: word
        part: body
        words:
          - "<HTML"
          - "<html"
        condition: or
      - type: word
        part: header
        words:
          - "text/html"
        negative: true
      - type: status
        status:
          - 200