README.md

August 28, 2024 · View on GitHub

Salesforce ContentDocument Detector Nuclei Template

A Nuclei Template that checks if a website is running Salesforce Lightning and then attempts to see if guest users are authorized to retrieve files

About

I wrote this up to automatically check for websites that have Salesforce Lightning and let me download files so I can check for permissions issues in Bug Bounties that allow me to access files i shouldn't

Usage

This should work fine with Nuclei, and a medium-severity item should be returned if successful. You may disagree with having a medium severity for something informational like this, but that's a personal choice because I always want to check out websites that hit on this check.