Files
nuclei-templates/http/vulnerabilities/wordpress/wp-sym404.yaml
Prince Chaddha ea7a5969c8 Revert "chore: update TemplateMan 🤖"
This reverts commit c31d574176.
2025-05-27 10:39:47 +08:00

35 lines
961 B
YAML

id: wp-sym404
info:
name: Wordpress sym404 directory
author: pussycat0x
severity: high
description: Searches for sensitive directories present in the sym404.
reference:
- https://twitter.com/momika233/status/1540325055280070656
classification:
cpe: cpe:2.3:a:wpvnteam:wp_extra:*:*:*:*:wordpress:*:*:*
metadata:
verified: true
max-request: 1
vendor: wpvnteam
product: wp_extra
google-query: inurl:"/wp-includes/sym404/"
tags: wordpress,listing,wp,exposure
http:
- method: GET
path:
- "{{BaseURL}}/wp-includes/sym404/root/etc/passwd"
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- "root:.*:0:0:"
- type: status
status:
- 200
# digest: 4a0a00473045022078e7dedbfe9c4f63545d8e3a678eabcea2962d866c5ad3523f7ded1737f8f9480221009dded0cdf2f4463daa65fa235a99be57c33fa060b4373d52d2e2e2043554bbf4:922c64590222798bb761d5b6d8e72950