diff --git a/http/exposures/files/i18n-json-file.yaml b/http/exposures/files/i18n-json-file.yaml new file mode 100644 index 00000000000..8b7d4168aff --- /dev/null +++ b/http/exposures/files/i18n-json-file.yaml @@ -0,0 +1,34 @@ +id: i18n-json-file + +info: + name: i18n JSON - File Exposure + author: DhiyaneshDK + severity: unknown + description: | + Detects the exposure of the `i18n.json` file, which may contain language-specific keys, application strings, or internal configurations intended for client-side internationalization. Unintended access to this file could reveal sensitive internal identifiers or support unauthorized reconnaissance of application behavior. + metadata: + verified: true + max-request: 1 + shodan-query: html:"i18n.json" + tags: i18n,exposure + +http: + - method: GET + path: + - "{{BaseURL}}/i18n.json" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "{" + + - type: word + part: content_type + words: + - "application/json" + + - type: status + status: + - 200