diff --git a/misconfiguration/express-stack-trace.yaml b/misconfiguration/express-stack-trace.yaml new file mode 100644 index 00000000000..d1a6e255498 --- /dev/null +++ b/misconfiguration/express-stack-trace.yaml @@ -0,0 +1,33 @@ +id: express-stack-trace + +info: + name: Express Stack Trace + author: DhiyaneshDk + severity: low + metadata: + verified: true + shodan-query: html:"Welcome to Express" + tags: misconfig,express + +requests: + - method: GET + path: + - '{{BaseURL}}/{{randstr}}' + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "NotFoundError: Not Found" + - "at Function.handle" + condition: and + + - type: word + part: header + words: + - "text/html" + + - type: status + status: + - 404