diff --git a/dns/azure-takeover-detection.yaml b/dns/azure-takeover-detection.yaml index d8405b067f..a04bef1ba5 100644 --- a/dns/azure-takeover-detection.yaml +++ b/dns/azure-takeover-detection.yaml @@ -54,5 +54,3 @@ dns: group: 1 regex: - "IN\tCNAME\t(.+)" - - diff --git a/dns/detect-dangling-cname.yaml b/dns/detect-dangling-cname.yaml index 8d38c5bc62..f9676a5946 100644 --- a/dns/detect-dangling-cname.yaml +++ b/dns/detect-dangling-cname.yaml @@ -34,6 +34,4 @@ dns: - type: regex group: 1 regex: - - "IN\tCNAME\t(.+)" - - + - "IN\tCNAME\t(.+)" \ No newline at end of file diff --git a/dns/dmarc-detect.yaml b/dns/dmarc-detect.yaml index 703c5677ee..0c7b785f67 100644 --- a/dns/dmarc-detect.yaml +++ b/dns/dmarc-detect.yaml @@ -25,6 +25,4 @@ dns: - type: regex group: 1 regex: - - "IN\tTXT\t(.+)" - - + - "IN\tTXT\t(.+)" \ No newline at end of file diff --git a/dns/dns-waf-detect.yaml b/dns/dns-waf-detect.yaml index 49e608fa08..02c447486f 100644 --- a/dns/dns-waf-detect.yaml +++ b/dns/dns-waf-detect.yaml @@ -168,6 +168,4 @@ dns: - type: word name: edns words: - - ".iidns.com" - - + - ".iidns.com" \ No newline at end of file diff --git a/dns/dnssec-detection.yaml b/dns/dnssec-detection.yaml index 7e723d2af9..f9007a6eb5 100644 --- a/dns/dnssec-detection.yaml +++ b/dns/dnssec-detection.yaml @@ -21,6 +21,4 @@ dns: matchers: - type: regex regex: - - "IN\tDS\t(.+)" - - + - "IN\tDS\t(.+)" \ No newline at end of file diff --git a/dns/ec2-detection.yaml b/dns/ec2-detection.yaml index fd76e0fc85..d120c45b06 100644 --- a/dns/ec2-detection.yaml +++ b/dns/ec2-detection.yaml @@ -21,6 +21,4 @@ dns: - type: regex regex: - "ec2-[-\\d]+\\.compute[-\\d]*\\.amazonaws\\.com" - - "ec2-[-\\d]+\\.[\\w\\d\\-]+\\.compute[-\\d]*\\.amazonaws\\.com" - - + - "ec2-[-\\d]+\\.[\\w\\d\\-]+\\.compute[-\\d]*\\.amazonaws\\.com" \ No newline at end of file diff --git a/dns/elasticbeantalk-takeover.yaml b/dns/elasticbeantalk-takeover.yaml index b650827729..c56af4d8fe 100644 --- a/dns/elasticbeantalk-takeover.yaml +++ b/dns/elasticbeantalk-takeover.yaml @@ -46,6 +46,4 @@ dns: - type: regex group: 1 regex: - - "IN\tCNAME\t(.+)" - - + - "IN\tCNAME\t(.+)" \ No newline at end of file diff --git a/dns/mx-fingerprint.yaml b/dns/mx-fingerprint.yaml index 338d5338a5..24808c1e14 100644 --- a/dns/mx-fingerprint.yaml +++ b/dns/mx-fingerprint.yaml @@ -27,6 +27,4 @@ dns: - type: regex group: 1 regex: - - "IN\tMX\t(.+)" - - + - "IN\tMX\t(.+)" \ No newline at end of file diff --git a/dns/mx-service-detector.yaml b/dns/mx-service-detector.yaml index f09fb548b3..dcf4e9b712 100644 --- a/dns/mx-service-detector.yaml +++ b/dns/mx-service-detector.yaml @@ -80,6 +80,4 @@ dns: name: "Proofpoint US" words: - "mx1-us1.ppe-hosted.com" - - "mx2-us1.ppe-hosted.com" - - + - "mx2-us1.ppe-hosted.com" \ No newline at end of file diff --git a/dns/nameserver-fingerprint.yaml b/dns/nameserver-fingerprint.yaml index 815ab7246f..d08362e0bd 100644 --- a/dns/nameserver-fingerprint.yaml +++ b/dns/nameserver-fingerprint.yaml @@ -24,6 +24,4 @@ dns: - type: regex group: 1 regex: - - "IN\tNS\t(.+)" - - + - "IN\tNS\t(.+)" \ No newline at end of file diff --git a/dns/ptr-fingerprint.yaml b/dns/ptr-fingerprint.yaml index 869efa1051..0861364501 100644 --- a/dns/ptr-fingerprint.yaml +++ b/dns/ptr-fingerprint.yaml @@ -24,6 +24,4 @@ dns: - type: regex group: 1 regex: - - "IN\tPTR\t(.+)" - - + - "IN\tPTR\t(.+)" \ No newline at end of file diff --git a/dns/servfail-refused-hosts.yaml b/dns/servfail-refused-hosts.yaml index ed2f9a84e1..87ed12bcf8 100644 --- a/dns/servfail-refused-hosts.yaml +++ b/dns/servfail-refused-hosts.yaml @@ -20,6 +20,4 @@ dns: - type: word words: - "SERVFAIL" - - "REFUSED" - - + - "REFUSED" \ No newline at end of file diff --git a/dns/spoofable-spf-records-ptr.yaml b/dns/spoofable-spf-records-ptr.yaml index 365e9d4960..6b99404335 100644 --- a/dns/spoofable-spf-records-ptr.yaml +++ b/dns/spoofable-spf-records-ptr.yaml @@ -22,6 +22,4 @@ dns: words: - "v=spf1" - " ptr " - condition: and - - + condition: and \ No newline at end of file diff --git a/dns/txt-fingerprint.yaml b/dns/txt-fingerprint.yaml index 50a0d5e76c..02e5f12700 100644 --- a/dns/txt-fingerprint.yaml +++ b/dns/txt-fingerprint.yaml @@ -26,6 +26,4 @@ dns: - type: regex group: 1 regex: - - "IN\tTXT\t(.+)" - - + - "IN\tTXT\t(.+)" \ No newline at end of file diff --git a/dns/worksites-detection.yaml b/dns/worksites-detection.yaml index e3e46d27c9..4122359917 100644 --- a/dns/worksites-detection.yaml +++ b/dns/worksites-detection.yaml @@ -20,6 +20,4 @@ dns: matchers: - type: word words: - - "69.164.223.206" - - + - "69.164.223.206" \ No newline at end of file diff --git a/file/android/adb-backup-enabled.yaml b/file/android/adb-backup-enabled.yaml index 2988be2c39..f35f8e7d5a 100644 --- a/file/android/adb-backup-enabled.yaml +++ b/file/android/adb-backup-enabled.yaml @@ -18,6 +18,4 @@ file: matchers: - type: word words: - - "android:allowBackup=\"true\"" - - + - "android:allowBackup=\"true\"" \ No newline at end of file diff --git a/file/electron/node-integration-enabled.yaml b/file/electron/node-integration-enabled.yaml index f4eff5cb00..c9ccd8598a 100644 --- a/file/electron/node-integration-enabled.yaml +++ b/file/electron/node-integration-enabled.yaml @@ -19,6 +19,4 @@ file: - type: word words: - - "nodeIntegration: true" - - + - "nodeIntegration: true" \ No newline at end of file diff --git a/file/logs/python-app-sql-exceptions.yaml b/file/logs/python-app-sql-exceptions.yaml index c6b60ab84a..639c971f66 100644 --- a/file/logs/python-app-sql-exceptions.yaml +++ b/file/logs/python-app-sql-exceptions.yaml @@ -22,6 +22,4 @@ file: - 'DataError' - 'IntegrityError' - 'ProgrammingError' - - 'OperationalError' - - + - 'OperationalError' \ No newline at end of file diff --git a/file/logs/suspicious-sql-error-messages.yaml b/file/logs/suspicious-sql-error-messages.yaml index 2b287a97e7..9d2a5be300 100644 --- a/file/logs/suspicious-sql-error-messages.yaml +++ b/file/logs/suspicious-sql-error-messages.yaml @@ -39,6 +39,4 @@ file: part: body regex: - 'near \"\*\"\: syntax error' - - 'SELECTs to the left and right of UNION do not have the same number of result columns' - - + - 'SELECTs to the left and right of UNION do not have the same number of result columns' \ No newline at end of file diff --git a/file/xss/dom-xss.yaml b/file/xss/dom-xss.yaml index cf311d7290..e100e000a0 100644 --- a/file/xss/dom-xss.yaml +++ b/file/xss/dom-xss.yaml @@ -49,6 +49,4 @@ file: regex: - 'location(\.href|\.hash|\.search|\.pathname)?' - 'window\.name' - - 'document(\.URL|\.referrer|\.documentURI|\.baseURI|\.cookie)' - - + - 'document(\.URL|\.referrer|\.documentURI|\.baseURI|\.cookie)' \ No newline at end of file diff --git a/headless/headless-open-redirect.yaml b/headless/headless-open-redirect.yaml index fd2782eb81..bab0d13ac3 100644 --- a/headless/headless-open-redirect.yaml +++ b/headless/headless-open-redirect.yaml @@ -121,6 +121,4 @@ headless: words: - "evil.com" - "Evil.Com - We get it...Daily." - condition: and - - + condition: and \ No newline at end of file diff --git a/headless/window-name-domxss.yaml b/headless/window-name-domxss.yaml index adfee9aaa2..b560cc0e94 100644 --- a/headless/window-name-domxss.yaml +++ b/headless/window-name-domxss.yaml @@ -91,6 +91,4 @@ headless: - type: kval part: alerts kval: - - alerts - - + - alerts \ No newline at end of file diff --git a/http/cnvd/2018/CNVD-2018-13393.yaml b/http/cnvd/2018/CNVD-2018-13393.yaml index 9314b29f0a..efb9edca21 100644 --- a/http/cnvd/2018/CNVD-2018-13393.yaml +++ b/http/cnvd/2018/CNVD-2018-13393.yaml @@ -29,6 +29,4 @@ http: words: - "' - - + - '"page" id="login" data\-version="([0-9.]+)">' \ No newline at end of file diff --git a/http/exposed-panels/octoprint-login.yaml b/http/exposed-panels/octoprint-login.yaml index 34364ab148..5b82852801 100644 --- a/http/exposed-panels/octoprint-login.yaml +++ b/http/exposed-panels/octoprint-login.yaml @@ -27,6 +27,4 @@ http: - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/apc-ups-login.yaml b/http/iot/apc-ups-login.yaml index 6f15c9d1fd..66787b2dcf 100644 --- a/http/iot/apc-ups-login.yaml +++ b/http/iot/apc-ups-login.yaml @@ -28,6 +28,4 @@ http: - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/contacam.yaml b/http/iot/contacam.yaml index e08c6c22cf..c65155674d 100644 --- a/http/iot/contacam.yaml +++ b/http/iot/contacam.yaml @@ -25,8 +25,7 @@ http: words: - 'ContaCam' part: body + - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/envision-gateway.yaml b/http/iot/envision-gateway.yaml index ea53d33da1..dde4b5c1ae 100644 --- a/http/iot/envision-gateway.yaml +++ b/http/iot/envision-gateway.yaml @@ -28,6 +28,4 @@ http: - 'EnvisionGateway' - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/epmp-login.yaml b/http/iot/epmp-login.yaml index 55159e47c9..19d1054d26 100644 --- a/http/iot/epmp-login.yaml +++ b/http/iot/epmp-login.yaml @@ -29,6 +29,4 @@ http: - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/heatmiser-wifi-thermostat.yaml b/http/iot/heatmiser-wifi-thermostat.yaml index 3771d3396b..896586624a 100644 --- a/http/iot/heatmiser-wifi-thermostat.yaml +++ b/http/iot/heatmiser-wifi-thermostat.yaml @@ -28,6 +28,4 @@ http: - 'Heatmiser Wifi Thermostat' - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/hp-laserjet-detect.yaml b/http/iot/hp-laserjet-detect.yaml index 589d609abd..eaefa6b3b1 100644 --- a/http/iot/hp-laserjet-detect.yaml +++ b/http/iot/hp-laserjet-detect.yaml @@ -27,6 +27,4 @@ http: part: body - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/internet-service.yaml b/http/iot/internet-service.yaml index 41b5585457..c380c5e770 100644 --- a/http/iot/internet-service.yaml +++ b/http/iot/internet-service.yaml @@ -28,6 +28,4 @@ http: - 'Internet Services' - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/iotawatt-app-exposure.yaml b/http/iot/iotawatt-app-exposure.yaml index b8e474ef40..d7b773efac 100644 --- a/http/iot/iotawatt-app-exposure.yaml +++ b/http/iot/iotawatt-app-exposure.yaml @@ -32,6 +32,4 @@ http: - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/liveview-axis-camera.yaml b/http/iot/liveview-axis-camera.yaml index 9e8f4f7dd8..455f8eec53 100644 --- a/http/iot/liveview-axis-camera.yaml +++ b/http/iot/liveview-axis-camera.yaml @@ -46,6 +46,4 @@ http: part: body group: 1 regex: - - 'AXIS (.*) Network Camera' - - + - 'AXIS (.*) Network Camera' \ No newline at end of file diff --git a/http/iot/mobotix-guest-camera.yaml b/http/iot/mobotix-guest-camera.yaml index 70f44bc0c0..1132677315 100644 --- a/http/iot/mobotix-guest-camera.yaml +++ b/http/iot/mobotix-guest-camera.yaml @@ -24,8 +24,7 @@ http: - type: word words: - 'MOBOTIX' + - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/netsurveillance-web.yaml b/http/iot/netsurveillance-web.yaml index e8fbf05405..beec23a8eb 100644 --- a/http/iot/netsurveillance-web.yaml +++ b/http/iot/netsurveillance-web.yaml @@ -30,6 +30,4 @@ http: - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/novus-ip-camera.yaml b/http/iot/novus-ip-camera.yaml index 946bf8b105..af17b93222 100644 --- a/http/iot/novus-ip-camera.yaml +++ b/http/iot/novus-ip-camera.yaml @@ -35,6 +35,4 @@ http: - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/nuuno-network-login.yaml b/http/iot/nuuno-network-login.yaml index de8972898d..8d740c7278 100644 --- a/http/iot/nuuno-network-login.yaml +++ b/http/iot/nuuno-network-login.yaml @@ -29,6 +29,4 @@ http: - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/octoprint-3dprinter-detect.yaml b/http/iot/octoprint-3dprinter-detect.yaml index cc605abf0a..2da7c68e95 100644 --- a/http/iot/octoprint-3dprinter-detect.yaml +++ b/http/iot/octoprint-3dprinter-detect.yaml @@ -32,6 +32,4 @@ http: - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/routeros-login.yaml b/http/iot/routeros-login.yaml index 3619f5e1af..1aa669edf3 100644 --- a/http/iot/routeros-login.yaml +++ b/http/iot/routeros-login.yaml @@ -33,6 +33,4 @@ http: - type: regex group: 1 regex: - - '

RouterOS v(.+)<\/h1>' - - + - '

RouterOS v(.+)<\/h1>' \ No newline at end of file diff --git a/http/iot/targa-camera-lfi.yaml b/http/iot/targa-camera-lfi.yaml index 614aaf900f..98b397a020 100644 --- a/http/iot/targa-camera-lfi.yaml +++ b/http/iot/targa-camera-lfi.yaml @@ -29,6 +29,4 @@ http: - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/webcamxp-5.yaml b/http/iot/webcamxp-5.yaml index a06a501fcf..6d38b968eb 100644 --- a/http/iot/webcamxp-5.yaml +++ b/http/iot/webcamxp-5.yaml @@ -28,6 +28,4 @@ http: - 'webcamXP 5' - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/takeovers/aftership-takeover.yaml b/http/takeovers/aftership-takeover.yaml index f7f7e67c87..104dd4dd81 100644 --- a/http/takeovers/aftership-takeover.yaml +++ b/http/takeovers/aftership-takeover.yaml @@ -24,6 +24,4 @@ http: - type: word words: - - Oops.

The page you're looking for doesn't exist. - - + - Oops.

The page you're looking for doesn't exist. \ No newline at end of file diff --git a/http/takeovers/agilecrm-takeover.yaml b/http/takeovers/agilecrm-takeover.yaml index a6be5a1fd1..fecf6b90ba 100644 --- a/http/takeovers/agilecrm-takeover.yaml +++ b/http/takeovers/agilecrm-takeover.yaml @@ -24,6 +24,4 @@ http: - type: word words: - - Sorry, this page is no longer available. - - + - Sorry, this page is no longer available. \ No newline at end of file diff --git a/http/takeovers/aha-takeover.yaml b/http/takeovers/aha-takeover.yaml index 4b37e0f516..63a160c4ea 100644 --- a/http/takeovers/aha-takeover.yaml +++ b/http/takeovers/aha-takeover.yaml @@ -24,6 +24,4 @@ http: - type: word words: - - There is no portal here ... sending you back to Aha! - - + - There is no portal here ... sending you back to Aha! \ No newline at end of file