Compare commits

...
Author SHA1 Message Date
Prince Chaddha 7a000a070b Fix exposed-venv-dir template structure
- Fix template section from 'requests' to 'http'
- Add impact and remediation sections
- Fix author format (remove spaces)
- Add proper metadata including verified and max-request
- Clean up tags and improve description formatting
2025-07-30 19:58:56 -05:00
Al Baradi Joy 65c1bb4abb Create exposed-venv-dir.yaml 2025-07-31 02:34:50 +06:00
@@ -0,0 +1,42 @@
id: exposed-venv-dir
info:
name: Exposed Python Virtual Environment Directory
author: albaradijoy
severity: info
description: |
Detects publicly accessible /venv directories, which may expose the Python virtual environment. These folders typically contain package dependencies and config files like pyvenv.cfg.
impact: |
Exposed virtual environment directories can reveal sensitive information about the application dependencies, versions, and configuration.
remediation: |
Restrict access to virtual environment directories by configuring proper web server rules or moving them outside the web root.
reference:
- https://docs.python.org/3/library/venv.html
metadata:
verified: true
max-request: 1
tags: exposure,venv,file-disclosure,python
http:
- method: GET
path:
- "{{BaseURL}}/venv/"
headers:
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) NucleiScanner
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: body
words:
- "Index of /venv"
- type: word
part: header
words:
- "text/html"