Added Profile header for additional WAP coverage on CJServer hosts

2022-12-10 17:42:58 -05:00 · 2022-12-10 17:42:58 -05:00 · 2e9ba680a7
parent 74c4049363
commit 2e9ba680a7
1 changed files with 1 additions and 0 deletions
--- a/vulnerabilities/generic/oob-header-based-interaction.yaml
+++ b/vulnerabilities/generic/oob-header-based-interaction.yaml
@ -31,6 +31,7 @@ requests:
      X-Host: spoofed.{{interactsh-url}}
      X-Forwarded-Server: spoofed.{{interactsh-url}}
      X-HTTP-Host-Override: spoofed.{{interactsh-url}}
+      Profile: http://{{interactsh-url}}/profile.xml
      Cache-Control: no-transform

    matchers-condition: or