id: idea-folder-exposure

info:
  name: Public .idea Folder containing files with sensitive data
  author: martincodes-de
  severity: info
  description: Searches for .idea Folder by querying the /.idea and a few other files with sensitive data.
  metadata:
    max-request: 2
  tags: phpstorm,jetbrains,idea,exposure,files

http:
  - method: GET
    path:
      - "{{BaseURL}}/.idea/deployment.xml"
      - "{{BaseURL}}/.idea/workspace.xml"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "<?xml version="
          - "<project version"
        part: body
        condition: and
# digest: 4a0a00473045022100d178ac2334eb3f2f0f3f9b9e668f7dc99ebd3cedcfbaa2a49f22c2e15df2c48402200b15a3ad79502eca57f94385878f31f739e2d0dd4d963d5f7a5d36b8c337fb52:922c64590222798bb761d5b6d8e72950