[TEMPLATE CONTRIBUTION] ...

[e11i0t4lders0n]

Is there an existing template for this?

• I have searched the existing templates.

Nuclei Template

id: aspnet-appsettings

info:
  name: ASP.NET Core Appsettings 
  author: tushar
  severity: low
  tags: config, exposure, aspnet

http:
  - method: GET
    path:
      - "{{BaseURL}}/appsettings.json"
      - "{{BaseURL}}/appsettings.Development.json"
      - "{{BaseURL}}/appsettings.Production.json"

    matchers-condition: and
    matchers:

      - type: status
        status:
          - 200


      - type: word
        part: header
        words:
          - "application/json"


      - type: word
        part: body
        words:
          - "{"
          - "}"
        condition: and

Relevant dumped responses

Anything else?

No response

[pussycat0x]

Hi @e11i0t4lders0n, This is duplicate of https://github.com/projectdiscovery/nuclei-templates/blob/main/http/exposures/files/appsettings-file-disclosure.yaml