Update exposed-alps-spring.yaml

patch-1
team-projectdiscovery 2021-01-09 17:10:12 +05:30
parent 81c04d4e07
commit 0cf38debaf
1 changed files with 1 additions and 5 deletions

View File

@ -4,8 +4,7 @@ info:
name: Exposed Spring Data REST Application-Level Profile Semantics (ALPS)
author: dwisiswant0
severity: medium
# https://niemand.com.ar/2021/01/08/exploiting-application-level-profile-semantics-apls-from-spring-data-rest/
reference: https://niemand.com.ar/2021/01/08/exploiting-application-level-profile-semantics-apls-from-spring-data-rest/
requests:
- method: GET
@ -13,9 +12,6 @@ requests:
- "{{BaseURL}}/profile"
- "{{BaseURL}}/api/profile"
- "{{BaseURL}}/alps/profile"
- "{{BaseURL}}:8080/profile"
- "{{BaseURL}}:8080/api/profile"
- "{{BaseURL}}:8080/alps/profile"
matchers-condition: and
matchers:
- type: word