Preparing for request clustering

2021-01-13 13:01:46 +05:30 · 2021-01-13 13:01:46 +05:30 · 106da77fc3
parent b5159893d0
commit 106da77fc3
22 changed files with 23 additions and 23 deletions
--- a/cves/2014/CVE-2014-6271.yaml
+++ b/cves/2014/CVE-2014-6271.yaml
@ -9,7 +9,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
      - "{{BaseURL}}/cgi-bin/status"
      - "{{BaseURL}}/cgi-bin/stats"
      - "{{BaseURL}}/cgi-bin/test"
--- a/cves/2020/CVE-2020-16952.yaml
+++ b/cves/2020/CVE-2020-16952.yaml
@ -15,7 +15,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    matchers-condition: and
    matchers:
      - type: regex
--- a/exposed-panels/kubernetes-dashboard.yaml
+++ b/exposed-panels/kubernetes-dashboard.yaml
@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    matchers:
      - type: word
        words:
--- a/exposed-panels/webmin-panel.yaml
+++ b/exposed-panels/webmin-panel.yaml
@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
      - "{{BaseURL}}/webmin/"
    redirects: true
    matchers:
--- a/exposed-panels/zipkin-exposure.yaml
+++ b/exposed-panels/zipkin-exposure.yaml
@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
      - "{{BaseURL}}/zipkin/"
    matchers:
      - type: word
--- a/exposed-tokens/generic/http-username-password.yaml
+++ b/exposed-tokens/generic/http-username-password.yaml
@ -13,7 +13,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"

    extractors:
      - type: regex
--- a/exposures/apis/wadl-api.yaml
+++ b/exposures/apis/wadl-api.yaml
@ -28,7 +28,7 @@ requests:
        part: body
  - method: OPTIONS
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
      - "{{BaseURL}}/api/v1"
      - "{{BaseURL}}/api/v2"
    matchers:
--- a/miscellaneous/dir-listing.yaml
+++ b/miscellaneous/dir-listing.yaml
@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    matchers:
      - type: word
        words:
--- a/miscellaneous/trace-method.yaml
+++ b/miscellaneous/trace-method.yaml
@ -11,7 +11,7 @@ info:
 requests:
  - method: TRACE
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"

    matchers:
      - type: word
@ -22,7 +22,7 @@ requests:

  - method: OPTIONS
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"

    matchers:
      - type: regex
--- a/misconfiguration/linkerd-ssrf-detect.yaml
+++ b/misconfiguration/linkerd-ssrf-detect.yaml
@ -23,7 +23,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    headers:
      l5d-dtab: /svc/* => /$/inet/example.com/443

--- a/misconfiguration/php-errors.yaml
+++ b/misconfiguration/php-errors.yaml
@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"

    matchers:
      - type: word
--- a/takeovers/subdomain-takeover.yaml
+++ b/takeovers/subdomain-takeover.yaml
@ -15,7 +15,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    matchers-condition: or

    matchers:
--- a/technologies/basic-auth-detection.yaml
+++ b/technologies/basic-auth-detection.yaml
@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"

    matchers-condition: and
    matchers:
--- a/technologies/cacti-detect.yaml
+++ b/technologies/cacti-detect.yaml
@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
      - "{{BaseURL}}/cacti/"

    matchers-condition: and
--- a/technologies/google-storage.yaml
+++ b/technologies/google-storage.yaml
@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    matchers:
      - type: word
        words:
--- a/technologies/home-assistant.yaml
+++ b/technologies/home-assistant.yaml
@ -9,7 +9,7 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}:8123/"
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    matchers:
      - type: word
        words:
--- a/technologies/kong-detect.yaml
+++ b/technologies/kong-detect.yaml
@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"

    matchers-condition: and
    matchers:
--- a/technologies/linkerd-badrule-detect.yaml
+++ b/technologies/linkerd-badrule-detect.yaml
@ -14,7 +14,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    headers:
      l5d-dtab: /svc/*

--- a/technologies/mrtg-detect.yaml
+++ b/technologies/mrtg-detect.yaml
@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
      - "{{BaseURL}}/mrtg/"
      - "{{BaseURL}}/MRTG/"

--- a/technologies/prometheus-exporter-detect.yaml
+++ b/technologies/prometheus-exporter-detect.yaml
@ -10,7 +10,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    headers:
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
    matchers-condition: and
--- a/technologies/tech-detect.yaml
+++ b/technologies/tech-detect.yaml
@ -6,7 +6,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"

    redirects: true
    max-redirects: 2
--- a/vulnerabilities/other/pdf-signer-ssti-to-rce.yaml
+++ b/vulnerabilities/other/pdf-signer-ssti-to-rce.yaml
@ -9,7 +9,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    headers:
      Cookie: "CSRF-TOKEN=rnqvt{{shell_exec('cat /etc/passwd')}}to5gw; simcify=uv82sg0jj2oqa0kkr2virls4dl"
    matchers-condition: and