Source Code Enumeration Detection by Keyword

Title: Source Code Enumeration Detection by Keyword
Status: test
Description:Detects source code enumeration that use GET requests by keyword searches in URL strings
References:
  -https://pentester.land/tutorials/2018/10/25/source-code-disclosure-via-exposed-git-folder.html
  -https://medium.com/@logicbomb_1/bugbounty-how-i-was-able-to-download-the-source-code-of-indias-largest-telecom-service-52cf5c5640a1
Author: James Ahearn
Date: 2019-06-08
modified:2022-10-05
Tags:

• -'attack.discovery'
• -'attack.t1083'

Logsource:

• category: webserver

Detection:
  keywords:
    - '.git/'
  condition:keywords
Falsepositives:
  -Unknown
Level: medium