Merge pull request #1865 from projectdiscovery/fix-CVE-2012-3153
Fixed CVE-2012-3153 with strict matcherspatch-1
commit
7763d9c36a
|
@ -24,9 +24,7 @@ requests:
|
|||
matchers:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- 'regex("\\\\.*\\\\showenv", body_1)'
|
||||
- 'regex("/.*/showenv", body_1)'
|
||||
condition: or
|
||||
- 'contains(body_1, "Reports Servlet")'
|
||||
|
||||
- type: status
|
||||
status:
|
||||
|
@ -41,11 +39,9 @@ requests:
|
|||
extractors:
|
||||
- type: regex
|
||||
name: windows_working_path
|
||||
part: body_1
|
||||
regex:
|
||||
- ".?.?\\\\.*\\\\showenv"
|
||||
- type: regex
|
||||
name: linux_working_path
|
||||
part: body_1
|
||||
regex:
|
||||
- "/.*/showenv"
|
||||
|
|
Loading…
Reference in New Issue