Merge pull request #6337 from pect0ral/master

Added Profile header for additional WAP coverage on CJServer hosts
2022-12-12 23:16:01 +05:30 · 2022-12-12 23:16:01 +05:30 · 4cfacf2028
parent d1eb7ba06d 2e9ba680a7
commit 4cfacf2028
1 changed files with 1 additions and 0 deletions
--- a/vulnerabilities/generic/oob-header-based-interaction.yaml
+++ b/vulnerabilities/generic/oob-header-based-interaction.yaml
@ -31,6 +31,7 @@ requests:
      X-Host: spoofed.{{interactsh-url}}
      X-Forwarded-Server: spoofed.{{interactsh-url}}
      X-HTTP-Host-Override: spoofed.{{interactsh-url}}
+      Profile: http://{{interactsh-url}}/profile.xml
      Cache-Control: no-transform

    matchers-condition: or