mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-02-04 17:53:27 +08:00
27 lines
688 B
YAML
27 lines
688 B
YAML
id: linux-world-writable-file
|
|
|
|
info:
|
|
name: Linux World-Writable File Permission
|
|
author: songyaeji
|
|
severity: high
|
|
description: |
|
|
System files were configured with world-writable (chmod o+w) permissions.Malicious users could modify them, leading to privilege escalation, backdoors, or service disruption.
|
|
reference:
|
|
- https://isms.kisa.or.kr
|
|
tags: linux,audit,compliance,kisa
|
|
|
|
self-contained: true
|
|
|
|
code:
|
|
- engine:
|
|
- sh
|
|
- bash
|
|
source: |
|
|
find / -type f -perm -0002 ! -path "/tmp/*" -exec ls -l {} \; 2>/dev/null
|
|
|
|
matchers:
|
|
- type: regex
|
|
name: world-writable-files
|
|
part: response
|
|
regex:
|
|
- "^-........w.*" |