Update tianqing-info-leak.yaml

patch-1
Prince Chaddha 2022-04-20 12:29:00 +04:00 committed by GitHub
parent aec114c561
commit 37b638bd08
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 5 deletions

View File

@ -3,10 +3,10 @@ id: tianqing-info-leak
info:
name: Tianqing Info Leak
author: ritikchaddha
severity: high
severity: medium
reference:
- https://mp.weixin.qq.com/s/wH5luLISE_G381W2ssv93g
tags: tianqing,leak
tags: tianqing,exposure
requests:
- method: GET
@ -15,17 +15,18 @@ requests:
matchers-condition: and
matchers:
- type: word
part: body
words:
- "schema_name"
- "table_name"
part: body
- "table_size"
condition: and
- type: word
part: header
words:
- "application/json"
part: header
- type: status
status: