exposed-filezilla-config: Exposed FileZilla Configuration File - Exposure

id: exposed-filezilla-config

info:
  name: Exposed FileZilla Configuration File - Exposure
  author: pussycat0x
  severity: medium
  description: |
    Detected publicly accessible FileZilla client configuration files (sitemanager.xml, recentservers.xml, filezilla.xml).
  reference:
    - https://wiki.filezilla-project.org/Xml_files
  metadata:
    verified: true
    max-request: 4
  tags: exposure,config,filezilla,ftp,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/files/FileZilla.xml"
      - "{{BaseURL}}/recentservers.xml"
      - "{{BaseURL}}/filezilla.xml"

    stop-at-first-match: true

    matchers:
      - type: dsl
        dsl:
          - "status_code == 200"
          - "contains_all(body, '<filezilla','<User>','<Pass>','<Logontype>')"
        condition: and
# digest: 4b0a00483046022100c843f183a5023054cfd58ab24ea03b1c324fcf55097208765fd640271a94e5f9022100cc8ced8f0959e7888ff29dbbb2a40982ff84c43722b3ffc45796f1ed310f385e:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.