diff --git a/http/vulnerabilities/other/fumengyun-sqli.yaml b/http/vulnerabilities/other/fumengyun-sqli.yaml index d51dad1282..3b32ad39e2 100644 --- a/http/vulnerabilities/other/fumengyun-sqli.yaml +++ b/http/vulnerabilities/other/fumengyun-sqli.yaml @@ -36,6 +36,7 @@ http: GET /Ajax/AjaxMethod.ashx?action=getEmpByname&Name=Y%27;WAITFOR%20DELAY%20%270:0:6%27-- HTTP/1.1 Host: {{Hostname}} + stop-at-first-match: true matchers-condition: or matchers: - type: dsl @@ -49,6 +50,8 @@ http: name: time-based dsl: - 'duration_2>=6' - - 'contains_all(response_2, "0", "text/plain")' + - 'len(body_2) == 1' + - 'regex("^0$", body_2)' + - 'contains(content_type_2, "text/plain")' condition: and -# digest: 4a0a004730450220093e0ab367ad9bd0fb821ab8a76348d35fdccfcdceb731ab028dd494d3e58ba702210082b1ed2a0e9f9d628c6d0d16a48f346fecd912251491470e4926509bf6fb6baa:922c64590222798bb761d5b6d8e72950 \ No newline at end of file +# digest: 4a0a004730450220093e0ab367ad9bd0fb821ab8a76348d35fdccfcdceb731ab028dd494d3e58ba702210082b1ed2a0e9f9d628c6d0d16a48f346fecd912251491470e4926509bf6fb6baa:922c64590222798bb761d5b6d8e72950