misc updates
parent
cd06c6137f
commit
3c6aa9da0c
|
@ -3,28 +3,31 @@ id: iis-internal-ip-disclosure
|
||||||
info:
|
info:
|
||||||
name: IIS Internal IP Disclosure Template
|
name: IIS Internal IP Disclosure Template
|
||||||
author: WillD96
|
author: WillD96
|
||||||
severity: none
|
severity: info
|
||||||
tags: iis, config, disclosure
|
tags: iis,misconfig,disclosure
|
||||||
|
reference: https://support.kemptechnologies.com/hc/en-us/articles/203522429-How-to-Mitigate-Against-Internal-IP-Address-Domain-Name-Disclosure-In-Real-Server-Redirect
|
||||||
|
|
||||||
requests:
|
requests:
|
||||||
- raw:
|
- raw:
|
||||||
- |+
|
- |+
|
||||||
GET / HTTP/1.0
|
GET / HTTP/1.0
|
||||||
|
Host:
|
||||||
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0
|
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0
|
||||||
Accept: */*
|
Accept: */*
|
||||||
|
|
||||||
|
unsafe: true # Use Unsafe HTTP library for malformed HTTP requests.
|
||||||
unsafe: true
|
matchers-condition: and
|
||||||
matchers:
|
matchers:
|
||||||
- type: regex
|
- type: regex
|
||||||
regex:
|
regex:
|
||||||
- '([0-9]{1,3}[\.]){3}[0-9]{1,3}'
|
- '([0-9]{1,3}[\.]){3}[0-9]{1,3}'
|
||||||
condition: and
|
|
||||||
- type: status
|
- type: status
|
||||||
status:
|
status:
|
||||||
- 302
|
- 302
|
||||||
|
|
||||||
extractors:
|
extractors:
|
||||||
- type: regex
|
- type: regex
|
||||||
part: header
|
part: header
|
||||||
regex:
|
regex:
|
||||||
- '([0-9]{1,3}[\.]){3}[0-9]{1,3}'
|
- '([0-9]{1,3}[\.]){3}[0-9]{1,3}'
|
Loading…
Reference in New Issue