auth-js.yaml

id: auth-js

info:
  name: auth.js
  author: geeknik
  severity: high

requests:
  - method: GET
    path:
      - "{{BaseURL}}/auth.js"
      - "{{BaseURL}}/api/auth.js"
      - "{{BaseURL}}/config/auth.js"
      - "{{BaseURL}}/web/auth.js"
      - "{{BaseURL}}/src/auth.js"
      - "{{BaseURL}}/src/api/auth.js"
      - "{{BaseURL}}/web/api/auth.js"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200
      - type: word
        words:
          - "state_token ="
          - "client_secret"
        condition: and
      - type: word
        part: header
        words:
          - "text/plain"
          - "text/javascript"
          - "application/javascript"
          - "application/x-javascript"
        condition: or
      - type: word
        part: header
        words:
          - "text/html"
        negative: true
      - type: word
        part: body
        words:
          - "<html"
          - "window.location = x"
          - "can not find auth.js"
          - "function _popwnd_open"
          - "window.dataLayer"
          - "console.log("
          - "window.location"
          - "Unknown Host"
          - "<h1"
          - "Error 404: Error not found"
          - "SERVICE_NOT_EXIST"
          - "<p>"
          - "Static content proxy"
          - "ABORTED"
          - "// Cedexis Inc."
          - "This is a placeholder."
          - "Counting any requests"
          - ": 409,"
          - "No action executes!"
        condition: or
        negative: true
      - type: dsl
        dsl:
          - "len(body) > 50 && len(body) < 8192"