id: idea-folder-exposure

info:
  name: Public .idea Folder containing files with sensitive data
  author: martincodes-de
  severity: info
  description: Searches for .idea Folder by querying the /.idea and a few other files with sensitive data.
  metadata:
    max-request: 2
  tags: phpstorm,jetbrains,idea,exposure,files,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/.idea/deployment.xml"
      - "{{BaseURL}}/.idea/workspace.xml"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "<?xml version="
          - "<project version"
        part: body
        condition: and
# digest: 490a0046304402200898b8436fcac26a49310b7cb5105f23c45966e99e5760f94b98065a982bb961022014825df4891c77a2be8908a49b3b984e57f046ed0ce3170032f4bb4f69ea69f3:922c64590222798bb761d5b6d8e72950