updated basic xss detection

2020-05-24 05:17:49 +00:00 · 2020-05-24 05:17:49 +00:00 · 383f59f84a
parent 08ec24f5f1
commit 383f59f84a
1 changed files with 20 additions and 0 deletions
--- a/basic-detections/basic-xss-prober.yaml
+++ b/basic-detections/basic-xss-prober.yaml
@ -0,0 +1,20 @@
+id: basic-xss-prober
+
+info:
+  name: Basic XSS Prober
+  author: nadino
+  severity: low
+
+ # Basic XSS prober
+ # Manaul testing needed for exploitation 
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/%61%27%22%3e%3c%69%6e%6a%65%63%74%61%62%6c%65%3e"
+
+    matchers:
+
+      - type: word
+        words:
+        - "'><injectable>"