Files
nuclei-templates/http/misconfiguration/shell-history.yaml
2024-12-01 13:57:55 +00:00

55 lines
1.2 KiB
YAML

id: shell-history
info:
name: Shell History
author: pentest_swissky,geeknik
severity: low
description: Discover history for bash, ksh, sh, and zsh
metadata:
max-request: 4
tags: misconfig
http:
- method: GET
max-redirects: 1
path:
- "{{BaseURL}}/.bash_history"
- "{{BaseURL}}/.ksh_history"
- "{{BaseURL}}/.sh_history"
- "{{BaseURL}}/.zsh_history"
matchers-condition: and
matchers:
- type: word
words:
- "mkdir "
- "chmod "
- "mv "
- "nano "
- "vim "
- "pico "
- "sudo "
- "cd "
- "cp "
- "ps aux"
- "ls "
- "logout"
condition: or
- type: word
part: response
words:
- "<?xml"
- "<env"
- "application/javascript"
- "application/json"
- "application/xml"
- "html>"
- "text/html"
- "image/"
negative: true
- type: status
status:
- 200
# digest: 4a0a004730450221009f00e81782bf43e4b803842eb428a833f49b23811374816515ba181ea37b447c022031c804f5a412be1818a5fa604224cd99256b1f377790bf30cb39a6bd6410b7dc:922c64590222798bb761d5b6d8e72950