daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Preparing for request clustering

patch-1
team-projectdiscovery 2021-01-13 13:01:46 +05:30
parent b5159893d0
commit 106da77fc3
22 changed files with 23 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cves/2014/CVE-2014-6271.yaml
View File

@ -9,7 +9,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
- "{{BaseURL}}/cgi-bin/status" - "{{BaseURL}}/cgi-bin/status"
- "{{BaseURL}}/cgi-bin/stats" - "{{BaseURL}}/cgi-bin/stats"
- "{{BaseURL}}/cgi-bin/test" - "{{BaseURL}}/cgi-bin/test"

2
cves/2020/CVE-2020-16952.yaml
View File

@ -15,7 +15,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: regex - type: regex

2
exposed-panels/kubernetes-dashboard.yaml
View File

@ -8,7 +8,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
matchers: matchers:
- type: word - type: word
words: words:

2
exposed-panels/webmin-panel.yaml
View File

@ -8,7 +8,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
- "{{BaseURL}}/webmin/" - "{{BaseURL}}/webmin/"
redirects: true redirects: true
matchers: matchers:

2
exposed-panels/zipkin-exposure.yaml
View File

@ -8,7 +8,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
- "{{BaseURL}}/zipkin/" - "{{BaseURL}}/zipkin/"
matchers: matchers:
- type: word - type: word

2
exposed-tokens/generic/http-username-password.yaml
View File

@ -13,7 +13,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
extractors: extractors:
- type: regex - type: regex

2
exposures/apis/wadl-api.yaml
View File

@ -28,7 +28,7 @@ requests:
part: body part: body
- method: OPTIONS - method: OPTIONS
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
- "{{BaseURL}}/api/v1" - "{{BaseURL}}/api/v1"
- "{{BaseURL}}/api/v2" - "{{BaseURL}}/api/v2"
matchers: matchers:

2
miscellaneous/dir-listing.yaml
View File

@ -8,7 +8,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
matchers: matchers:
- type: word - type: word
words: words:

4
miscellaneous/trace-method.yaml
View File

@ -11,7 +11,7 @@ info:
requests: requests:
- method: TRACE - method: TRACE
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
matchers: matchers:
- type: word - type: word
@ -22,7 +22,7 @@ requests:
- method: OPTIONS - method: OPTIONS
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
matchers: matchers:
- type: regex - type: regex

2
misconfiguration/linkerd-ssrf-detect.yaml
View File

@ -23,7 +23,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
headers: headers:
l5d-dtab: /svc/* => /$/inet/example.com/443 l5d-dtab: /svc/* => /$/inet/example.com/443

2
misconfiguration/php-errors.yaml
View File

@ -8,7 +8,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
matchers: matchers:
- type: word - type: word

2
takeovers/subdomain-takeover.yaml
View File

@ -15,7 +15,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
matchers-condition: or matchers-condition: or
matchers: matchers:

2
technologies/basic-auth-detection.yaml
View File

@ -8,7 +8,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
matchers-condition: and matchers-condition: and
matchers: matchers:

2
technologies/cacti-detect.yaml
View File

@ -8,7 +8,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
- "{{BaseURL}}/cacti/" - "{{BaseURL}}/cacti/"
matchers-condition: and matchers-condition: and

2
technologies/google-storage.yaml
View File

@ -8,7 +8,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
matchers: matchers:
- type: word - type: word
words: words:

2
technologies/home-assistant.yaml
View File

@ -9,7 +9,7 @@ requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}:8123/" - "{{BaseURL}}:8123/"
- "{{BaseURL}}/" - "{{BaseURL}}"
matchers: matchers:
- type: word - type: word
words: words:

2
technologies/kong-detect.yaml
View File

@ -8,7 +8,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
matchers-condition: and matchers-condition: and
matchers: matchers:

2
technologies/linkerd-badrule-detect.yaml
View File

@ -14,7 +14,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
headers: headers:
l5d-dtab: /svc/* l5d-dtab: /svc/*

2
technologies/mrtg-detect.yaml
View File

@ -8,7 +8,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
- "{{BaseURL}}/mrtg/" - "{{BaseURL}}/mrtg/"
- "{{BaseURL}}/MRTG/" - "{{BaseURL}}/MRTG/"

2
technologies/prometheus-exporter-detect.yaml
View File

@ -10,7 +10,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
headers: headers:
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
matchers-condition: and matchers-condition: and

2
technologies/tech-detect.yaml
View File

@ -6,7 +6,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
redirects: true redirects: true
max-redirects: 2 max-redirects: 2

2
vulnerabilities/other/pdf-signer-ssti-to-rce.yaml
View File

@ -9,7 +9,7 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
headers: headers:
Cookie: "CSRF-TOKEN=rnqvt{{shell_exec('cat /etc/passwd')}}to5gw; simcify=uv82sg0jj2oqa0kkr2virls4dl" Cookie: "CSRF-TOKEN=rnqvt{{shell_exec('cat /etc/passwd')}}to5gw; simcify=uv82sg0jj2oqa0kkr2virls4dl"
matchers-condition: and matchers-condition: and