Update syntax
parent
cd21b2533e
commit
023f56f32e
|
@ -6,12 +6,12 @@ info:
|
|||
severity: info
|
||||
|
||||
dns:
|
||||
- name: "{{FQDN}}"
|
||||
type: CNAME
|
||||
class: inet
|
||||
recursion: true
|
||||
retries: 3
|
||||
matchers:
|
||||
- name: "{{FQDN}}"
|
||||
type: CNAME
|
||||
class: inet
|
||||
recursion: true
|
||||
retries: 3
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
# The response must contains a CNAME record
|
||||
|
|
|
@ -5,17 +5,16 @@ info:
|
|||
author: pdteam
|
||||
severity: info
|
||||
|
||||
|
||||
dns:
|
||||
- name: "{{FQDN}}"
|
||||
type: A
|
||||
class: inet
|
||||
recursion: true
|
||||
retries: 3
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- name: "{{FQDN}}"
|
||||
type: A
|
||||
class: inet
|
||||
recursion: true
|
||||
retries: 3
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
words:
|
||||
- "example-cname.com"
|
||||
|
||||
- type: word
|
||||
|
|
|
@ -1,37 +1,37 @@
|
|||
id: dummy-raw
|
||||
info:
|
||||
name: Example-Fuzzing
|
||||
name: Example-Fuzzing
|
||||
|
||||
requests:
|
||||
- payloads:
|
||||
param_a: /home/user/wordlist_param_a.txt
|
||||
param_b: /home/user/wordlist_param_b.txt
|
||||
attack: clusterbomb # sniper, pitchfork, clusterbomb
|
||||
attack: clusterbomb # Available options: sniper, pitchfork and clusterbomb
|
||||
raw:
|
||||
# Request with simple param and header manipulation with DSL functions
|
||||
- |
|
||||
POST /?param_a={{param_a}}¶mb={{param_b}} HTTP/1.1
|
||||
User-Agent: {{param_a}}
|
||||
Host: {{Hostname}}
|
||||
another_header: {{base64(param_b)}}
|
||||
Accept: */*
|
||||
- |
|
||||
POST /?param_a={{param_a}}¶mb={{param_b}} HTTP/1.1
|
||||
User-Agent: {{param_a}}
|
||||
Host: {{Hostname}}
|
||||
another_header: {{base64(param_b)}}
|
||||
Accept: */*
|
||||
|
||||
This is the Body
|
||||
This is the Body
|
||||
# Request with body manipulation
|
||||
- |
|
||||
DELETE / HTTP/1.1
|
||||
User-Agent: nuclei
|
||||
Host: {{Hostname}}
|
||||
|
||||
This is the body {{sha256(param_a)}}
|
||||
- |
|
||||
DELETE / HTTP/1.1
|
||||
User-Agent: nuclei
|
||||
Host: {{Hostname}}
|
||||
|
||||
This is the body {{sha256(param_a)}}
|
||||
# Yet another one
|
||||
- |
|
||||
PUT / HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
||||
This is again the request body {{html_escape(param_a)}} + {{hex_encode(param_b))}}
|
||||
- |
|
||||
PUT / HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
||||
This is again the request body {{html_escape(param_a)}} + {{hex_encode(param_b))}}
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
words:
|
||||
- "title"
|
||||
- "body"
|
||||
|
|
|
@ -12,7 +12,7 @@ requests:
|
|||
|
||||
matchers-condition: or
|
||||
|
||||
#matchers-condition supports AND or OR operation
|
||||
# matchers-condition supports AND or OR operation
|
||||
|
||||
matchers:
|
||||
- type: word
|
||||
|
|
|
@ -7,27 +7,27 @@ info:
|
|||
|
||||
requests:
|
||||
- raw:
|
||||
- |
|
||||
- |
|
||||
GET / HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
Origin: {{BaseURL}}
|
||||
Connection: close
|
||||
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko)
|
||||
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko)
|
||||
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
|
||||
Accept-Encoding: gzip, deflate
|
||||
Accept-Language: en-US,en;q=0.9
|
||||
|
||||
- |
|
||||
- |
|
||||
GET /testing HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
Origin: {{BaseURL}}
|
||||
Connection: close
|
||||
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko)
|
||||
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko)
|
||||
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
|
||||
Accept-Encoding: gzip, deflate
|
||||
Accept-Language: en-US,en;q=0.9
|
||||
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
words:
|
||||
- "Test is test"
|
||||
|
|
|
@ -7,17 +7,17 @@ info:
|
|||
|
||||
requests:
|
||||
- raw:
|
||||
- |
|
||||
- |
|
||||
GET / HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
Origin: {{BaseURL}}
|
||||
Connection: close
|
||||
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko)
|
||||
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko)
|
||||
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
|
||||
Accept-Encoding: gzip, deflate
|
||||
Accept-Language: en-US,en;q=0.9
|
||||
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
words:
|
||||
- "Test is test"
|
||||
|
|
Loading…
Reference in New Issue