id: filezilla-exposed

info:
  name: Filezilla
  author: amsda
  severity: medium
  description: Filezilla internal file is exposed.
  metadata:
    max-request: 3
  tags: exposure,files

http:
  - method: GET
    path:
      - "{{BaseURL}}/filezilla.xml"
      - "{{BaseURL}}/sitemanager.xml"
      - "{{BaseURL}}/FileZilla.xml"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "<FileZilla"
          - "<Servers>"
        condition: and

      - type: word
        words:
          - xml
        part: header

      - type: status
        status:
          - 200
# digest: 4a0a00473045022024a6b4b08b90c0cf10b74a3c1c4de490b8a49674684a00069d1e0b9916564e8c022100a55902e3c25c598124d952d839474d517b288700c8e5fa69d2343b5b40e873da:922c64590222798bb761d5b6d8e72950