False Positive/Negative: JWKS file found. See: RFC-5785

[digininja]

Output of suspected false positive / negative

False positive on:

+ /.well-known/jwks: JWKS file found. See: RFC-5785

db_tests:"007327","RFC-5785","3","/.well-known/jwks","GET","keys","sig","","","","JWKS file found","",""

My site returns a 404 for this.

curl https://digi.ninja/.well-known/jwks

Debug output

A snippet from the save file:

---------------------------------------------------------------------------
                          Information
---------------------------------------------------------------------------
Test ID:        007327
References:     RFC-5785
Message:        /.well-known/jwks: JWKS file found. See: RFC-5785
Reason:         Content Match - Match 1 (Or)
---------------------------------------------------------------------------
                          Request
---------------------------------------------------------------------------
GET /.well-known/jwks HTTP/1.1
Connection: Keep-Alive
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0
Host: digi.ninja

---------------------------------------------------------------------------
                          Response
---------------------------------------------------------------------------
HTTP/1.1 404 Not Found
date: Tue, 30 Jul 2024 11:44:14 GMT
server: Apache
do_not_hack_me: Please
x-powered-by: Rainbows and XSS<script>alert(1)</script>

The whole file is here: digi.ninja_443_2024-07-30_007327.txt