diff --git a/dns/azure-takeover-detection.yaml b/dns/azure-takeover-detection.yaml index d8405b067f..a04bef1ba5 100644 --- a/dns/azure-takeover-detection.yaml +++ b/dns/azure-takeover-detection.yaml @@ -54,5 +54,3 @@ dns: group: 1 regex: - "IN\tCNAME\t(.+)" - - diff --git a/dns/detect-dangling-cname.yaml b/dns/detect-dangling-cname.yaml index 8d38c5bc62..f9676a5946 100644 --- a/dns/detect-dangling-cname.yaml +++ b/dns/detect-dangling-cname.yaml @@ -34,6 +34,4 @@ dns: - type: regex group: 1 regex: - - "IN\tCNAME\t(.+)" - - + - "IN\tCNAME\t(.+)" \ No newline at end of file diff --git a/dns/dmarc-detect.yaml b/dns/dmarc-detect.yaml index 703c5677ee..0c7b785f67 100644 --- a/dns/dmarc-detect.yaml +++ b/dns/dmarc-detect.yaml @@ -25,6 +25,4 @@ dns: - type: regex group: 1 regex: - - "IN\tTXT\t(.+)" - - + - "IN\tTXT\t(.+)" \ No newline at end of file diff --git a/dns/dns-waf-detect.yaml b/dns/dns-waf-detect.yaml index 49e608fa08..02c447486f 100644 --- a/dns/dns-waf-detect.yaml +++ b/dns/dns-waf-detect.yaml @@ -168,6 +168,4 @@ dns: - type: word name: edns words: - - ".iidns.com" - - + - ".iidns.com" \ No newline at end of file diff --git a/dns/dnssec-detection.yaml b/dns/dnssec-detection.yaml index 7e723d2af9..f9007a6eb5 100644 --- a/dns/dnssec-detection.yaml +++ b/dns/dnssec-detection.yaml @@ -21,6 +21,4 @@ dns: matchers: - type: regex regex: - - "IN\tDS\t(.+)" - - + - "IN\tDS\t(.+)" \ No newline at end of file diff --git a/dns/ec2-detection.yaml b/dns/ec2-detection.yaml index fd76e0fc85..d120c45b06 100644 --- a/dns/ec2-detection.yaml +++ b/dns/ec2-detection.yaml @@ -21,6 +21,4 @@ dns: - type: regex regex: - "ec2-[-\\d]+\\.compute[-\\d]*\\.amazonaws\\.com" - - "ec2-[-\\d]+\\.[\\w\\d\\-]+\\.compute[-\\d]*\\.amazonaws\\.com" - - + - "ec2-[-\\d]+\\.[\\w\\d\\-]+\\.compute[-\\d]*\\.amazonaws\\.com" \ No newline at end of file diff --git a/dns/elasticbeantalk-takeover.yaml b/dns/elasticbeantalk-takeover.yaml index b650827729..c56af4d8fe 100644 --- a/dns/elasticbeantalk-takeover.yaml +++ b/dns/elasticbeantalk-takeover.yaml @@ -46,6 +46,4 @@ dns: - type: regex group: 1 regex: - - "IN\tCNAME\t(.+)" - - + - "IN\tCNAME\t(.+)" \ No newline at end of file diff --git a/dns/mx-fingerprint.yaml b/dns/mx-fingerprint.yaml index 338d5338a5..24808c1e14 100644 --- a/dns/mx-fingerprint.yaml +++ b/dns/mx-fingerprint.yaml @@ -27,6 +27,4 @@ dns: - type: regex group: 1 regex: - - "IN\tMX\t(.+)" - - + - "IN\tMX\t(.+)" \ No newline at end of file diff --git a/dns/mx-service-detector.yaml b/dns/mx-service-detector.yaml index f09fb548b3..dcf4e9b712 100644 --- a/dns/mx-service-detector.yaml +++ b/dns/mx-service-detector.yaml @@ -80,6 +80,4 @@ dns: name: "Proofpoint US" words: - "mx1-us1.ppe-hosted.com" - - "mx2-us1.ppe-hosted.com" - - + - "mx2-us1.ppe-hosted.com" \ No newline at end of file diff --git a/dns/nameserver-fingerprint.yaml b/dns/nameserver-fingerprint.yaml index 815ab7246f..d08362e0bd 100644 --- a/dns/nameserver-fingerprint.yaml +++ b/dns/nameserver-fingerprint.yaml @@ -24,6 +24,4 @@ dns: - type: regex group: 1 regex: - - "IN\tNS\t(.+)" - - + - "IN\tNS\t(.+)" \ No newline at end of file diff --git a/dns/ptr-fingerprint.yaml b/dns/ptr-fingerprint.yaml index 869efa1051..0861364501 100644 --- a/dns/ptr-fingerprint.yaml +++ b/dns/ptr-fingerprint.yaml @@ -24,6 +24,4 @@ dns: - type: regex group: 1 regex: - - "IN\tPTR\t(.+)" - - + - "IN\tPTR\t(.+)" \ No newline at end of file diff --git a/dns/servfail-refused-hosts.yaml b/dns/servfail-refused-hosts.yaml index ed2f9a84e1..87ed12bcf8 100644 --- a/dns/servfail-refused-hosts.yaml +++ b/dns/servfail-refused-hosts.yaml @@ -20,6 +20,4 @@ dns: - type: word words: - "SERVFAIL" - - "REFUSED" - - + - "REFUSED" \ No newline at end of file diff --git a/dns/spoofable-spf-records-ptr.yaml b/dns/spoofable-spf-records-ptr.yaml index 365e9d4960..6b99404335 100644 --- a/dns/spoofable-spf-records-ptr.yaml +++ b/dns/spoofable-spf-records-ptr.yaml @@ -22,6 +22,4 @@ dns: words: - "v=spf1" - " ptr " - condition: and - - + condition: and \ No newline at end of file diff --git a/dns/txt-fingerprint.yaml b/dns/txt-fingerprint.yaml index 50a0d5e76c..02e5f12700 100644 --- a/dns/txt-fingerprint.yaml +++ b/dns/txt-fingerprint.yaml @@ -26,6 +26,4 @@ dns: - type: regex group: 1 regex: - - "IN\tTXT\t(.+)" - - + - "IN\tTXT\t(.+)" \ No newline at end of file diff --git a/dns/worksites-detection.yaml b/dns/worksites-detection.yaml index e3e46d27c9..4122359917 100644 --- a/dns/worksites-detection.yaml +++ b/dns/worksites-detection.yaml @@ -20,6 +20,4 @@ dns: matchers: - type: word words: - - "69.164.223.206" - - + - "69.164.223.206" \ No newline at end of file diff --git a/file/android/adb-backup-enabled.yaml b/file/android/adb-backup-enabled.yaml index 2988be2c39..f35f8e7d5a 100644 --- a/file/android/adb-backup-enabled.yaml +++ b/file/android/adb-backup-enabled.yaml @@ -18,6 +18,4 @@ file: matchers: - type: word words: - - "android:allowBackup=\"true\"" - - + - "android:allowBackup=\"true\"" \ No newline at end of file diff --git a/file/electron/node-integration-enabled.yaml b/file/electron/node-integration-enabled.yaml index f4eff5cb00..c9ccd8598a 100644 --- a/file/electron/node-integration-enabled.yaml +++ b/file/electron/node-integration-enabled.yaml @@ -19,6 +19,4 @@ file: - type: word words: - - "nodeIntegration: true" - - + - "nodeIntegration: true" \ No newline at end of file diff --git a/file/logs/python-app-sql-exceptions.yaml b/file/logs/python-app-sql-exceptions.yaml index c6b60ab84a..639c971f66 100644 --- a/file/logs/python-app-sql-exceptions.yaml +++ b/file/logs/python-app-sql-exceptions.yaml @@ -22,6 +22,4 @@ file: - 'DataError' - 'IntegrityError' - 'ProgrammingError' - - 'OperationalError' - - + - 'OperationalError' \ No newline at end of file diff --git a/file/logs/suspicious-sql-error-messages.yaml b/file/logs/suspicious-sql-error-messages.yaml index 2b287a97e7..9d2a5be300 100644 --- a/file/logs/suspicious-sql-error-messages.yaml +++ b/file/logs/suspicious-sql-error-messages.yaml @@ -39,6 +39,4 @@ file: part: body regex: - 'near \"\*\"\: syntax error' - - 'SELECTs to the left and right of UNION do not have the same number of result columns' - - + - 'SELECTs to the left and right of UNION do not have the same number of result columns' \ No newline at end of file diff --git a/file/xss/dom-xss.yaml b/file/xss/dom-xss.yaml index cf311d7290..e100e000a0 100644 --- a/file/xss/dom-xss.yaml +++ b/file/xss/dom-xss.yaml @@ -49,6 +49,4 @@ file: regex: - 'location(\.href|\.hash|\.search|\.pathname)?' - 'window\.name' - - 'document(\.URL|\.referrer|\.documentURI|\.baseURI|\.cookie)' - - + - 'document(\.URL|\.referrer|\.documentURI|\.baseURI|\.cookie)' \ No newline at end of file diff --git a/headless/headless-open-redirect.yaml b/headless/headless-open-redirect.yaml index fd2782eb81..bab0d13ac3 100644 --- a/headless/headless-open-redirect.yaml +++ b/headless/headless-open-redirect.yaml @@ -121,6 +121,4 @@ headless: words: - "evil.com" - "Evil.Com - We get it...Daily." - condition: and - - + condition: and \ No newline at end of file diff --git a/headless/window-name-domxss.yaml b/headless/window-name-domxss.yaml index adfee9aaa2..b560cc0e94 100644 --- a/headless/window-name-domxss.yaml +++ b/headless/window-name-domxss.yaml @@ -91,6 +91,4 @@ headless: - type: kval part: alerts kval: - - alerts - - + - alerts \ No newline at end of file diff --git a/http/cnvd/2018/CNVD-2018-13393.yaml b/http/cnvd/2018/CNVD-2018-13393.yaml index 9314b29f0a..efb9edca21 100644 --- a/http/cnvd/2018/CNVD-2018-13393.yaml +++ b/http/cnvd/2018/CNVD-2018-13393.yaml @@ -29,6 +29,4 @@ http: words: - "' - - + - '"page" id="login" data\-version="([0-9.]+)">' \ No newline at end of file diff --git a/http/exposed-panels/octoprint-login.yaml b/http/exposed-panels/octoprint-login.yaml index 34364ab148..5b82852801 100644 --- a/http/exposed-panels/octoprint-login.yaml +++ b/http/exposed-panels/octoprint-login.yaml @@ -27,6 +27,4 @@ http: - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/apc-ups-login.yaml b/http/iot/apc-ups-login.yaml index 6f15c9d1fd..66787b2dcf 100644 --- a/http/iot/apc-ups-login.yaml +++ b/http/iot/apc-ups-login.yaml @@ -28,6 +28,4 @@ http: - type: status status: - - 200 - - + - 200 \ No newline at end of file diff --git a/http/iot/contacam.yaml b/http/iot/contacam.yaml index e08c6c22cf..c65155674d 100644 --- a/http/iot/contacam.yaml +++ b/http/iot/contacam.yaml @@ -25,8 +25,7 @@ http: words: - '
The page you're looking for doesn't exist. - - + - Oops.
The page you're looking for doesn't exist. \ No newline at end of file diff --git a/http/takeovers/agilecrm-takeover.yaml b/http/takeovers/agilecrm-takeover.yaml index a6be5a1fd1..fecf6b90ba 100644 --- a/http/takeovers/agilecrm-takeover.yaml +++ b/http/takeovers/agilecrm-takeover.yaml @@ -24,6 +24,4 @@ http: - type: word words: - - Sorry, this page is no longer available. - - + - Sorry, this page is no longer available. \ No newline at end of file diff --git a/http/takeovers/aha-takeover.yaml b/http/takeovers/aha-takeover.yaml index 4b37e0f516..63a160c4ea 100644 --- a/http/takeovers/aha-takeover.yaml +++ b/http/takeovers/aha-takeover.yaml @@ -24,6 +24,4 @@ http: - type: word words: - - There is no portal here ... sending you back to Aha! - - + - There is no portal here ... sending you back to Aha! \ No newline at end of file