diff --git a/other/files/configs/WordPress-ReadMe.bcheck b/other/files/configs/WordPress-ReadMe.bcheck new file mode 100644 index 0000000..138feaf --- /dev/null +++ b/other/files/configs/WordPress-ReadMe.bcheck @@ -0,0 +1,26 @@ +metadata: + language: v1-beta + name: "WordPress README file Exposure" + description: "Tests for WordPress README file exposed" + author: "r3dg33k" + tags: "exposure", "php", "wordpress" + +run for each: + # you could add more values to this list to make the check repeat + potential_path = + "/readme.html", + "/wp/readme.html", + "/blog/wp/readme.html" + +given host then + send request called check: + method: "GET" + path: {potential_path} + + if "First Things First" in {check.response.body} and {check.response.status_code} is "200" then + report issue: + severity: info + confidence: certain + detail: `WordPress README file found at {potential_path}.` + remediation: "Ensure WordPress is hardened." + end if