daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Better regex for CRLF injection that catches whitespaces

patch-1
Ice3man 2020-05-27 21:38:40 +05:30 committed by GitHub
parent 386b4b0f07
commit 0ae2fe3c85
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
vulnerabilities/crlf-injection.yaml
View File

@ -13,5 +13,5 @@ requests:
matchers: matchers:
- type: regex - type: regex
regex: regex:
- "(^Set-Cookie:|;(| ))( |)crlfinjection=crlfinjection($|;)" - "^(?:Set-Cookie\s?:|;)\s?crlfinjection=crlfinjection(?:$|;)"
part: header part: header