Adding negative matcher for status

patch-1
sandeep 2021-05-10 15:27:53 +05:30
parent 7ec9bd99d0
commit 604f4d0064
1 changed files with 11 additions and 4 deletions

View File

@ -1,4 +1,5 @@
id: tomcat-manager-pathnormalization
info:
name: Tomcat Manager Path Normalization
author: organiccrap
@ -11,11 +12,17 @@ requests:
path:
- '{{BaseURL}}/..;/manager/html'
- '{{BaseURL}}/..;/host-manager/html'
headers:
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
matchers-condition: and
matchers:
- type: word
words:
- username="tomcat" password="s3cret"
- manager-gui
- 'username="tomcat" password="s3cret"'
- 'manager-gui'
condition: and
- type: status
status:
- 403
- 401
negative: true