Angular JSON File Disclosure Scanner

Angular is a popular open-source framework maintained by Google for building modern web applications. It is used by developers across enterprises and startups to build scalable and performant frontend interfaces. Angular empowers developers to create single-page applications with a dynamic and modular architecture. The framework is widely adopted due to its comprehensive tooling, a robust ecosystem, and the ability to streamline development processes. It enhances productivity by allowing developers to build applications with a component-based approach and is often used in large-scale applications where maintainability and testing are priorities.

File disclosure vulnerabilities occur when sensitive files are inadvertently exposed and accessible to unauthorized users. This vulnerability is typically found when configuration files, source code, or environment details are made publically available through incorrect directory permissions or URL mappings. In the context of Angular, it pertains to the unintended exposure of the 'angular.json' or 'angular-cli.json' files. Such exposures can potentially reveal project-specific configurations which could be leveraged to mount further attacks on the application. Identifying and mitigating this vulnerability is crucial to enhance the security posture of web services using Angular.

The vulnerability leverages HTTP GET requests to access specific configuration file locations, such as '/angular.json' and '/angular-cli.json'. The presence of the words '"root":' and '"config":' in the body of the response indicates the exposure of configuration details. Additionally, a status code of 200 with a 'Content-Type' of 'application/json' confirms successful retrieval. These configuration files might contain crucial development and build information which, when disclosed, can compromise the security of the application environment.

If exploited, the file disclosure vulnerability can lead to several adverse effects including unauthorized access to application configurations, understanding of the application's directory structure and potentially sensitive information such as file paths, environment settings, or API endpoints. Such information can be used by attackers to identify further vulnerabilities or orchestrate other attacks like code injection or unauthorized data access.