id: jakefile-disclosure

info:
  name: Jakefile Build Configuration - Disclosure
  author: 0x_Akoko
  severity: info
  description: |
    Detected Jakefile build configuration was found to be exposed, potentially having contained sensitive information including database credentials, API keys, and server configurations.
  reference:
    - https://jakejs.com/
    - https://github.com/jakejs/jake
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    cvss-score: 5.3
    cwe-id: CWE-200
  metadata:
    verified: true
    max-request: 2
    shodan-query: html:"Jakefile"
  tags: exposure,devops,jakefile,nodejs,config

http:
  - method: GET
    path:
      - "{{BaseURL}}/Jakefile"
      - "{{BaseURL}}/Jakefile.js"

    stop-at-first-match: true
    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - '!contains_any(body, "<!DOCTYPE", "<html", "<HTML")'
          - 'contains(body, "task(") && contains_any(body, "desc(", "jake.", "namespace(")'
        condition: and
# digest: 4b0a00483046022100bd79f8b93de317af4083101fb4fcf0d3915f0da0742c496f9e6fcdac34b22f9a022100e5f85665cc94287894f9f299bfd9462e310174c0c87eae5a0bf40dc35f6277d6:922c64590222798bb761d5b6d8e72950