daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/technologies/telerik/telerik-dialoghandler-detec...

45 lines
2.1 KiB
YAML
Raw Normal View History

updates
2020-07-02 13:53:41 +00:00
id: telerik-dialoghandler-detect
Adding more telerik paths
2021-05-25 00:01:08 +00:00
updates
2020-07-02 13:53:41 +00:00
info:
name: Detect Telerik Web UI Dialog Handler
Update telerik-dialoghandler-detect.yaml
2022-02-01 19:04:39 +00:00
author: organiccrap,zhenwarx,nielsing
severity updates
2020-09-20 12:57:43 +00:00
severity: info
Enhancement: technologies/telerik/telerik-dialoghandler-detect.yaml by cs
2022-02-28 14:22:58 +00:00
description: This template detects the Telerik Web UI Dialog Handler.
Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string Related nuclei tickets: * #259 - dynamic key-value field support for template information * #940 - new infos in template * #834 * RES-84
2021-08-18 11:37:49 +00:00
reference:
Additional paths for Telerik Web UI
2021-06-02 08:08:17 +00:00
- https://captmeelo.com/pentest/2018/08/03/pwning-with-telerik.html
- https://github.com/bao7uo/dp_crypto
Adding more telerik paths
2021-05-25 00:01:08 +00:00
tags: telerik,asp
updates
2020-07-02 13:53:41 +00:00
requests:
- method: GET
path:
Additional paths for Telerik Web UI
2021-06-02 08:08:17 +00:00
- '{{BaseURL}}/Telerik.Web.UI.DialogHandler.aspx?dp=1'
- '{{BaseURL}}/desktopmodules/telerikwebui/radeditorprovider/telerik.web.ui.dialoghandler.aspx?dp=1'
- '{{BaseURL}}/desktopmodules/dnnwerk.radeditorprovider/dialoghandler.aspx?dp=1'
- '{{BaseURL}}/DesktopModules/Admin/RadEditorProvider/DialogHandler.aspx?dp=1'
- '{{BaseURL}}/DesktopModule/UIQuestionControls/UIAskQuestion/Telerik.Web.UI.DialogHandler.aspx?dp=1'
- '{{BaseURL}}/Modules/CMS/Telerik.Web.UI.DialogHandler.aspx?dp=1'
- '{{BaseURL}}/Admin/ServerSide/Telerik.Web.UI.DialogHandler.aspx?dp=1'
- '{{BaseURL}}/DesktopModules/TNComments/Telerik.Web.UI.DialogHandler.aspx?dp=1'
- '{{BaseURL}}/Providers/HtmlEditorProviders/Telerik/Telerik.Web.UI.DialogHandler.aspx?dp=1'
- '{{BaseURL}}/App_Master/Telerik.Web.UI.DialogHandler.aspx?dp=1'
- '{{BaseURL}}/common/admin/PhotoGallery2/Telerik.Web.UI.DialogHandler.aspx?dp=1'
- '{{BaseURL}}/common/admin/Jobs2/Telerik.Web.UI.DialogHandler.aspx?dp=1'
- '{{BaseURL}}/AsiCommon/Controls/ContentManagement/ContentDesigner/Telerik.Web.UI.DialogHandler.aspx?dp=1'
- '{{BaseURL}}/common/admin/Calendar/Telerik.Web.UI.DialogHandler.aspx?dp=1'
- '{{BaseURL}}/cms/portlets/Telerik.Web.UI.DialogHandler.aspx?dp=1'
- '{{BaseURL}}/dashboard/UserControl/CMS/Page/Telerik.Web.UI.DialogHandler.aspx/Desktopmodules/Admin/dnnWerk.Users/DialogHandler.aspx?dp=1'
Adding .axd extensions to all paths
2022-02-01 16:59:43 +00:00
- '{{BaseURL}}/Telerik.Web.UI.DialogHandler.axd?dp=1'
Adding more telerik paths
2021-05-25 00:01:08 +00:00
Added stop-at-first-match in applicable templates
2021-09-02 11:59:10 +00:00
stop-at-first-match: true
Update telerik-dialoghandler-detect.yaml
2020-07-10 10:07:53 +00:00
matchers-condition: and
updates
2020-07-02 13:53:41 +00:00
matchers:
- type: status
status:
- 200
- type: word
words:
Additional paths for Telerik Web UI
2021-06-02 08:08:17 +00:00
- 'Invalid length for a Base-64 char array'
Enhancement: technologies/telerik/telerik-dialoghandler-detect.yaml by cs
2022-02-28 14:22:58 +00:00
# Enhanced by cs on 2022/02/28