daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/vulnerabilities/other/thinkific-redirect.yaml

25 lines
508 B
YAML
Raw Normal View History

adding few from masters
2021-01-11 06:58:56 +00:00
id: thinkific-redirect
info:
name: Open Redirect vulnerability on thinkific websites
author: Gal Nagli
Update thinkific-redirect.yaml
2021-08-24 07:56:21 +00:00
severity: medium
Adding tags to vulnerabilities and workflows
2021-02-12 05:53:01 +00:00
tags: redirect
adding few from masters
2021-01-11 06:58:56 +00:00
requests:
- method: GET
path:
Fixed possible FPs in open redirect templates (#4544) * Fixed possible FPs in open redirect templates We have replaced example.com with interact.sh since few domains redirect to example.com, which results in FP results. * updated example domain Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-06-06 10:40:15 +00:00
- "{{BaseURL}}/api/sso/v2/sso/jwt?error_url=http://interact.sh"
adding few from masters
2021-01-11 06:58:56 +00:00
matchers-condition: and
matchers:
- type: status
status:
- 302
- type: word
words:
Fixed possible FPs in open redirect templates (#4544) * Fixed possible FPs in open redirect templates We have replaced example.com with interact.sh since few domains redirect to example.com, which results in FP results. * updated example domain Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-06-06 10:40:15 +00:00
- "<a href=\"http://interact.sh?kind=jwt&amp;message=Nil+JSON+web+token\""
adding few from masters
2021-01-11 06:58:56 +00:00
condition: or
part: body