nuclei-templates/vulnerabilities/other/openvpn-hhi.yaml

29 lines
652 B
YAML
Raw Normal View History

id: openvpn-hhi
info:
name: OpenVPN Host Header Injection
author: twitter.com/Dheerajmadhukar
severity: info
description: A vulnerability in OpenVPN Access Server allows remote attackers to inject arbitrary redirection URLs by using the 'Host' HTTP header field.
2021-09-06 11:45:30 +00:00
tags: openvpn,hostheader-injection
requests:
- raw:
- |
GET / HTTP/1.1
Host: {{randstr}}.tld
matchers-condition: and
matchers:
- type: word
words:
- "https://{{randstr}}.tld/__session_start__/"
- "openvpn_sess"
part: header
condition: and
- type: status
status:
- 302