Merge pull request #9456 from pwnhxl/patch-6

add path

http/default-logins/zabbix/zabbix-default-login.yaml

@@ -18,7 +18,7 @@ info:
 http:
   - raw:
       - |
-        POST /index.php HTTP/1.1
+        POST {{path}} HTTP/1.1
         Host: {{Hostname}}
         Content-Type: application/x-www-form-urlencoded; charset=UTF-8
         X-Requested-With: XMLHttpRequest
@@ -26,11 +26,14 @@ http:
         name={{username}}&password={{password}}&autologin=1&enter=Sign+in
 
     payloads:
+      path:
+        - /index.php
+        - /zabbix/index.php
       username:
         - Admin
       password:
         - zabbix
-    attack: pitchfork
+    attack: clusterbomb
 
     matchers-condition: and
     matchers:

http/vulnerabilities/jenkins/unauthenticated-jenkins.yaml

@@ -13,7 +13,9 @@ http:
   - method: GET
     path:
       - "{{BaseURL}}"
+      - "{{BaseURL}}/jenkins/"
 
+    stop-at-first-match: true
     matchers-condition: and
     matchers:
       - type: word
@@ -24,4 +26,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100fdadef7a0033dd96c82c0343a62b892b6169b5b5be972ca6c62384fe03907b0d0221008acb50f988c15098ac252275d90b4bcbd721d166cfee91467b43df238c827139:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100fdadef7a0033dd96c82c0343a62b892b6169b5b5be972ca6c62384fe03907b0d0221008acb50f988c15098ac252275d90b4bcbd721d166cfee91467b43df238c827139:922c64590222798bb761d5b6d8e72950