Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates

README.md

@@ -41,9 +41,9 @@ An overview of the nuclei template directory including number of templates assoc
 | takeovers        | 65        | exposures       | 63       | technologies   | 51   |
 | misconfiguration | 54 | workflows       | 24         | miscellaneous  | 16  |
 | default-logins   | 20 | exposed-tokens  | 9  | dns            | 8            |
-| fuzzing          | 4          | helpers         | 2         | iot            | 7            |
+| fuzzing          | 5          | helpers         | 3         | iot            | 7            |
 
-**78 directories, 824 files**.
+**79 directories, 827 files**.
 
 </td>
 </tr>

fuzzing/wp-plugin-scan.yaml

@@ -0,0 +1,34 @@
+id: wp-plugin-scan
+info:
+  name: Wordpress Plugin Scanner
+  author: pdteam
+  severity: info
+  description: Wordlist based wordpress plugin scanner.
+  reference: https://github.com/RandomRobbieBF/wordpress-plugin-list
+  tags: fuzz
+
+requests:
+
+  - payloads:
+      plugin_wordlist: helpers/wordlists/wp-plugins.txt
+
+    attack: sniper
+    threads: 50
+
+    raw:
+      - |
+        GET {{plugin_wordlist}} HTTP/1.1
+        Host: {{Hostname}}
+        Accept: application/json, text/plain, */*
+        Accept-Language: en-US,en;q=0.5
+        Referer: {{BaseURL}}
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        words:
+          - "== Description =="

misconfiguration/gitlab/gitlab-public-signup.yaml

@@ -0,0 +1,31 @@
+id: gitlab-public-signup
+info:
+  name: GitLab public signup
+  author: pdteam
+  severity: info
+  tags: gitlab
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/users/sign_in"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - '<a data-qa-selector="register_link" href="/users/sign_up">Register now</a>'
+          - 'data-qa-selector="new_user_register_button"'
+
+      - type: word
+        words:
+          - 'https://about.gitlab.com'
+
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        words:
+          - '<meta content="GitLab.com" property="og:description">'
+        negative: true