minor changes

fuzzing/url-fuzzer.yaml

@@ -1,28 +0,0 @@
-id: url-fuzzer
-
-info:
-  name: URL Fuzzer - Discover hidden files and directories
-  author: Suman Kar
-  severity: info
-  tags: fuzzer
-
-  reference: |
-        - wordlists https://github.com/danielmiessler/SecLists/tree/master/Discovery/Web-Content
-
-requests:
-  - payloads:
-      dlist: helpers/wordlists/directory-list.txt
-
-    attack: sniper
-    threads: 50
-
-    raw:
-      - |
-        GET {{dlist}} HTTP/1.1
-        Host: {{Hostname}}
-        Referer: {{BaseURL}}
-
-    matchers:
-      - type: status
-        status:
-          - 200

vulnerabilities/gitlab/gitlab-user-enumeration.yaml

@@ -6,15 +6,17 @@ info:
   severity: info
   tags: gitlab,enumeration,fuzz
 
+  # Username source - https://github.com/danielmiessler/SecLists/blob/master/Usernames/Names/malenames-usa-top1000.txt
 
 requests:
   - payloads:
-      dlist: helpers/wordlists/user-list.txt
+      user: helpers/wordlists/user-list.txt
     attack: sniper
     threads: 50
+
     raw:
       - |
-        GET /users/{{dlist}}/exists HTTP/1.1
+        GET /users/{{user}}/exists HTTP/1.1
         Host: {{Hostname}}
         Accept-Language: en-US,en;q=0.9
         Accept: application/json, text/plain, */*
@@ -31,4 +33,9 @@ requests:
 
       - type: status
         status:
-          - 200
+          - 200
+
+      - type: word
+        words:
+          - "application/json"
+        part: header