Create aspnet-appsettings-exposure.yaml

2026-11-07 08:36:19 -10:00 · 2026-02-11 23:12:27 +05:30
1 changed files with 29 additions and 0 deletions
@@ -0,0 +1,29 @@
+id: aspnet-appsettings-exposure
+
+info:
+  name: ASP.NET Core Appsettings - Exposure
+  author: tushar
+  severity: medium
+  description:
+    Detects publicly accessible appsettings.json files in ASP.NET applications that may expose sensitive configuration data such as connection strings, API keys, and secrets.
+  metadata:
+    verified: true
+  tags: config,exposure,aspnet
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/appsettings.json"
+      - "{{BaseURL}}/appsettings.Development.json"
+      - "{{BaseURL}}/appsettings.Production.json"
+
+    stop-at-first-match: true
+
+    matchers-condition: and
+    matchers:
+      - type: dsl
+        dsl:
+          - 'status_code == 200'
+          - 'contains_any(body, "ConnectionString","Logging",)'
+          - 'contains(header,"application/json")'
+        condition: and