daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

updated domain

patch-5
Prince Chaddha 2024-07-14 13:36:22 +05:30
parent 7cc2da843f
commit 64cbf97e14
2 changed files with 94 additions and 94 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
dast/vulnerabilities/redirect/open-redirect.yaml
View File

@ -16,7 +16,7 @@ http:
payloads: payloads:
redirect: redirect:
- "example.com" - "oast.me"
fuzzing: fuzzing:
- part: query - part: query
@ -174,7 +174,7 @@ http:
- type: regex - type: regex
part: header part: header
regex: regex:
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)example\.com\/?(\/|[^.].*)?$' # https://regex101.com/r/idfD2e/1 - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)oast\.me\/?(\/|[^.].*)?$' # https://regex101.com/r/idfD2e/1
- type: status - type: status
status: status:

184
http/vulnerabilities/generic/open-redirect-generic.yaml
View File

@ -20,99 +20,99 @@ http:
payloads: payloads:
redirect: redirect:
- '%0a/example.com/' - '%0a/oast.me/'
- '%0d/example.com/' - '%0d/oast.me/'
- '%00/example.com/' - '%00/oast.me/'
- '%09/example.com/' - '%09/oast.me/'
- '%5C%5Cexample.com/%252e%252e%252f' - '%5C%5Coast.me/%252e%252e%252f'
- '%5Cexample.com' - '%5Coast.me'
- '%5cexample.com/%2f%2e%2e' - '%5coast.me/%2f%2e%2e'
- '%5c{{RootURL}}example.com/%2f%2e%2e' - '%5c{{RootURL}}oast.me/%2f%2e%2e'
- '../example.com' - '../oast.me'
- '.example.com' - '.oast.me'
- '/%5cexample.com' - '/%5coast.me'
- '////\;@example.com' - '////\;@oast.me'
- '////example.com' - '////oast.me'
- '///example.com' - '///oast.me'
- '///example.com/%2f%2e%2e' - '///oast.me/%2f%2e%2e'
- '///example.com@//' - '///oast.me@//'
- '///{{RootURL}}example.com/%2f%2e%2e' - '///{{RootURL}}oast.me/%2f%2e%2e'
- '//;@example.com' - '//;@oast.me'
- '//\/example.com/' - '//\/oast.me/'
- '//\@example.com' - '//\@oast.me'
- '//\example.com' - '//\oast.me'
- '//\texample.com/' - '//\toast.me/'
- '//example.com/%2F..' - '//oast.me/%2F..'
- '//example.com//' - '//oast.me//'
- '//%69%6e%74%65%72%61%63%74%2e%73%68' - '//%69%6e%74%65%72%61%63%74%2e%73%68'
- '//example.com@//' - '//oast.me@//'
- '//example.com\texample.com/' - '//oast.me\toast.me/'
- '//https://example.com//' - '//https://oast.me//'
- '/<>//example.com' - '/<>//oast.me'
- '/\/\/example.com/' - '/\/\/oast.me/'
- '/\/example.com' - '/\/oast.me'
- '/\example.com' - '/\oast.me'
- '/example.com' - '/oast.me'
- '/example.com/%2F..' - '/oast.me/%2F..'
- '/example.com/' - '/oast.me/'
- '/example.com/..;/css' - '/oast.me/..;/css'
- '/https:example.com' - '/https:oast.me'
- '/{{RootURL}}example.com/' - '/{{RootURL}}oast.me/'
- '/〱example.com' - '/〱oast.me'
- '/〵example.com' - '/〵oast.me'
- '/ゝexample.com' - '/ゝoast.me'
- '/ーexample.com' - '/ーoast.me'
- '/ｰexample.com' - '/ｰoast.me'
- '<>//example.com' - '<>//oast.me'
- '@example.com' - '@oast.me'
- '@https://example.com' - '@https://oast.me'
- '\/\/example.com/' - '\/\/oast.me/'
- 'example%E3%80%82com' - 'example%E3%80%82com'
- 'example.com' - 'oast.me'
- 'example.com/' - 'oast.me/'
- 'example.com//' - 'oast.me//'
- 'example.com;@' - 'oast.me;@'
- 'https%3a%2f%2fexample.com%2f' - 'https%3a%2f%2foast.me%2f'
- 'https:%0a%0dexample.com' - 'https:%0a%0doast.me'
- 'https://%0a%0dexample.com' - 'https://%0a%0doast.me'
- 'https://%09/example.com' - 'https://%09/oast.me'
- 'https://%2f%2f.example.com/' - 'https://%2f%2f.oast.me/'
- 'https://%3F.example.com/' - 'https://%3F.oast.me/'
- 'https://%5c%5c.example.com/' - 'https://%5c%5c.oast.me/'
- 'https://%5cexample.com@' - 'https://%5coast.me@'
- 'https://%23.example.com/' - 'https://%23.oast.me/'
- 'https://.example.com' - 'https://.oast.me'
- 'https://////example.com' - 'https://////oast.me'
- 'https:///example.com' - 'https:///oast.me'
- 'https:///example.com/%2e%2e' - 'https:///oast.me/%2e%2e'
- 'https:///example.com/%2f%2e%2e' - 'https:///oast.me/%2f%2e%2e'
- 'https:///example.com@example.com/%2e%2e' - 'https:///oast.me@oast.me/%2e%2e'
- 'https:///example.com@example.com/%2f%2e%2e' - 'https:///oast.me@oast.me/%2f%2e%2e'
- 'https://:80#@example.com/' - 'https://:80#@oast.me/'
- 'https://:80?@example.com/' - 'https://:80?@oast.me/'
- 'https://:@\@example.com' - 'https://:@\@oast.me'
- 'https://:@example.com\@example.com' - 'https://:@oast.me\@oast.me'
- 'https://;@example.com' - 'https://;@oast.me'
- 'https://\texample.com/' - 'https://\toast.me/'
- 'https://example.com/example.com' - 'https://oast.me/oast.me'
- 'https://example.com/https://example.com/' - 'https://oast.me/https://oast.me/'
- 'https://www.\.example.com' - 'https://www.\.oast.me'
- 'https:/\/\example.com' - 'https:/\/\oast.me'
- 'https:/\example.com' - 'https:/\oast.me'
- 'https:/example.com' - 'https:/oast.me'
- 'https:example.com' - 'https:oast.me'
- '{{RootURL}}example.com' - '{{RootURL}}oast.me'
- '〱example.com' - '〱oast.me'
- '〵example.com' - '〵oast.me'
- 'ゝexample.com' - 'ゝoast.me'
- 'ーexample.com' - 'ーoast.me'
- 'ｰexample.com' - 'ｰoast.me'
- 'redirect/example.com' - 'redirect/oast.me'
- 'cgi-bin/redirect.cgi?example.com' - 'cgi-bin/redirect.cgi?oast.me'
- 'out?example.com' - 'out?oast.me'
- 'login?to=http://example.com' - 'login?to=http://oast.me'
- '1/_https@example.com' - '1/_https@oast.me'
- 'redirect?targeturl=https://example.com' - 'redirect?targeturl=https://oast.me'
stop-at-first-match: true stop-at-first-match: true
@ -121,7 +121,7 @@ http:
- type: regex - type: regex
part: header part: header
regex: regex:
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)example\.com\/?(\/|[^.].*)?$' # https://regex101.com/r/ZDYhFh/1 - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)oast\.me\/?(\/|[^.].*)?$' # https://regex101.com/r/ZDYhFh/1
- type: status - type: status
status: status: