Fix Empty Lines

dns/azure-takeover-detection.yaml

@@ -54,5 +54,3 @@ dns:
         group: 1
         regex:
           - "IN\tCNAME\t(.+)"
-
-

dns/detect-dangling-cname.yaml

@@ -34,6 +34,4 @@ dns:
       - type: regex
         group: 1
         regex:
-          - "IN\tCNAME\t(.+)"
+          - "IN\tCNAME\t(.+)"
-
-

dns/dmarc-detect.yaml

@@ -25,6 +25,4 @@ dns:
       - type: regex
         group: 1
         regex:
-          - "IN\tTXT\t(.+)"
+          - "IN\tTXT\t(.+)"
-
-

dns/dns-waf-detect.yaml

@@ -168,6 +168,4 @@ dns:
       - type: word
         name: edns
         words:
-          - ".iidns.com"
+          - ".iidns.com"
-
-

dns/dnssec-detection.yaml

@@ -21,6 +21,4 @@ dns:
     matchers:
       - type: regex
         regex:
-          - "IN\tDS\t(.+)"
+          - "IN\tDS\t(.+)"
-
-

dns/ec2-detection.yaml

@@ -21,6 +21,4 @@ dns:
       - type: regex
         regex:
           - "ec2-[-\\d]+\\.compute[-\\d]*\\.amazonaws\\.com"
-          - "ec2-[-\\d]+\\.[\\w\\d\\-]+\\.compute[-\\d]*\\.amazonaws\\.com"
+          - "ec2-[-\\d]+\\.[\\w\\d\\-]+\\.compute[-\\d]*\\.amazonaws\\.com"
-
-

dns/elasticbeantalk-takeover.yaml

@@ -46,6 +46,4 @@ dns:
       - type: regex
         group: 1
         regex:
-          - "IN\tCNAME\t(.+)"
+          - "IN\tCNAME\t(.+)"
-
-

dns/mx-fingerprint.yaml

@@ -27,6 +27,4 @@ dns:
       - type: regex
         group: 1
         regex:
-          - "IN\tMX\t(.+)"
+          - "IN\tMX\t(.+)"
-
-

dns/mx-service-detector.yaml

@@ -80,6 +80,4 @@ dns:
         name: "Proofpoint US"
         words:
           - "mx1-us1.ppe-hosted.com"
-          - "mx2-us1.ppe-hosted.com"
+          - "mx2-us1.ppe-hosted.com"
-
-

dns/nameserver-fingerprint.yaml

@@ -24,6 +24,4 @@ dns:
       - type: regex
         group: 1
         regex:
-          - "IN\tNS\t(.+)"
+          - "IN\tNS\t(.+)"
-
-

dns/ptr-fingerprint.yaml

@@ -24,6 +24,4 @@ dns:
       - type: regex
         group: 1
         regex:
-          - "IN\tPTR\t(.+)"
+          - "IN\tPTR\t(.+)"
-
-

dns/servfail-refused-hosts.yaml

@@ -20,6 +20,4 @@ dns:
       - type: word
         words:
           - "SERVFAIL"
-          - "REFUSED"
+          - "REFUSED"
-
-

dns/spoofable-spf-records-ptr.yaml

@@ -22,6 +22,4 @@ dns:
         words:
           - "v=spf1"
           - " ptr "
-        condition: and
+        condition: and
-
-

dns/txt-fingerprint.yaml

@@ -26,6 +26,4 @@ dns:
       - type: regex
         group: 1
         regex:
-          - "IN\tTXT\t(.+)"
+          - "IN\tTXT\t(.+)"
-
-

dns/worksites-detection.yaml

@@ -20,6 +20,4 @@ dns:
     matchers:
       - type: word
         words:
-          - "69.164.223.206"
+          - "69.164.223.206"
-
-

file/android/adb-backup-enabled.yaml

@@ -18,6 +18,4 @@ file:
     matchers:
       - type: word
         words:
-          - "android:allowBackup=\"true\""
+          - "android:allowBackup=\"true\""
-
-

file/electron/node-integration-enabled.yaml

@@ -19,6 +19,4 @@ file:
 
       - type: word
         words:
-          - "nodeIntegration: true"
+          - "nodeIntegration: true"
-
-

file/logs/python-app-sql-exceptions.yaml

@@ -22,6 +22,4 @@ file:
           - 'DataError'
           - 'IntegrityError'
           - 'ProgrammingError'
-          - 'OperationalError'
+          - 'OperationalError'
-
-

file/logs/suspicious-sql-error-messages.yaml

@@ -39,6 +39,4 @@ file:
         part: body
         regex:
           - 'near \"\*\"\: syntax error'
-          - 'SELECTs to the left and right of UNION do not have the same number of result columns'
+          - 'SELECTs to the left and right of UNION do not have the same number of result columns'
-
-

file/xss/dom-xss.yaml

@@ -49,6 +49,4 @@ file:
         regex:
           - 'location(\.href|\.hash|\.search|\.pathname)?'
           - 'window\.name'
-          - 'document(\.URL|\.referrer|\.documentURI|\.baseURI|\.cookie)'
+          - 'document(\.URL|\.referrer|\.documentURI|\.baseURI|\.cookie)'
-
-

headless/headless-open-redirect.yaml

@@ -121,6 +121,4 @@ headless:
         words:
           - "evil.com"
           - "Evil.Com - We get it...Daily."
-        condition: and
+        condition: and
-
-

headless/window-name-domxss.yaml

@@ -91,6 +91,4 @@ headless:
       - type: kval
         part: alerts
         kval:
-          - alerts
+          - alerts
-
-

http/cnvd/2018/CNVD-2018-13393.yaml

@@ -29,6 +29,4 @@ http:
         words:
           - "<?php"
           - "login_met_cookie($metinfo_admin_name);"
-        condition: and
+        condition: and
-
-

http/cnvd/2019/CNVD-2019-01348.yaml

@@ -34,6 +34,4 @@ http:
         words:
           - "/view/js/xiuno.js"
           - "Choose Language (选择语言)"
-        condition: and
+        condition: and
-
-

http/cnvd/2019/CNVD-2019-06255.yaml

@@ -34,6 +34,4 @@ http:
           - 'PATH'
           - 'SHELL'
           - 'USER'
-        condition: and
+        condition: and
-
-

http/cnvd/2019/CNVD-2019-19299.yaml

@@ -51,6 +51,4 @@ http:
           - 'status_code_2 == 200'
           - 'contains(body_1, "htmoffice operate")'
           - 'contains(body_2, "Windows IP")'
-        condition: and
+        condition: and
-
-

http/cnvd/2019/CNVD-2019-32204.yaml

@@ -27,6 +27,4 @@ http:
     matchers:
       - type: regex
         regex:
-          - "root:.*:0:0:"
+          - "root:.*:0:0:"
-
-

http/cnvd/2020/CNVD-2020-23735.yaml

@@ -31,6 +31,4 @@ http:
         words:
           - "NzbwpQSdbY06Dngnoteo2wdgiekm7j4N"
           - "display_errors"
-        condition: and
+        condition: and
-
-

http/cnvd/2020/CNVD-2020-26585.yaml

@@ -64,6 +64,4 @@ http:
         group: 2
         regex:
           - '(\d{4}-\d{2}-\d{2})\\/([a-f0-9]+\.txt)'
-        internal: true
+        internal: true
-
-

http/cnvd/2020/CNVD-2020-46552.yaml

@@ -29,6 +29,4 @@ http:
           - 'contains(body, "$strip_slashes($host)")'
           - 'contains(body, "Log Helper")'
           - 'status_code == 200'
-        condition: and
+        condition: and
-
-

http/cnvd/2020/CNVD-2020-56167.yaml

@@ -31,6 +31,4 @@ http:
 
       - type: status
         status:
-          - 200
+          - 200
-
-

http/cnvd/2020/CNVD-2020-62422.yaml

@@ -32,6 +32,4 @@ http:
         part: body
         words:
           - "ctpDataSource.password"
-        condition: and
+        condition: and
-
-

http/cnvd/2020/CNVD-2020-67113.yaml

@@ -47,6 +47,4 @@ http:
 
       - type: status
         status:
-          - 200
+          - 200
-
-

http/cnvd/2020/CNVD-2020-68596.yaml

@@ -47,6 +47,4 @@ http:
           - https://weiphp.cn
           - WeiPHP
           - DB_PREFIX
-        condition: and
+        condition: and
-
-

http/cnvd/2021/CNVD-2021-01931.yaml

@@ -34,6 +34,4 @@ http:
           - "bit app support"
           - "fonts"
           - "extensions"
-        condition: and
+        condition: and
-
-

http/exposed-panels/ems-login-panel.yaml

@@ -26,6 +26,4 @@ http:
 
       - type: word
         words:
-          - "EMS Web Client - Login"
+          - "EMS Web Client - Login"
-
-

http/exposed-panels/gnu-mailman.yaml

@@ -35,6 +35,4 @@ http:
 
       - type: status
         status:
-          - 200
+          - 200
-
-

http/exposed-panels/mystrom-panel.yaml

@@ -29,6 +29,4 @@ http:
 
       - type: status
         status:
-          - 200
+          - 200
-
-

http/exposed-panels/nginx-proxy-manager.yaml

@@ -32,6 +32,4 @@ http:
         part: body
         group: 1
         regex:
-          - '"page" id="login" data\-version="([0-9.]+)">'
+          - '"page" id="login" data\-version="([0-9.]+)">'
-
-

http/exposed-panels/octoprint-login.yaml

@@ -27,6 +27,4 @@ http:
 
       - type: status
         status:
-          - 200
+          - 200
-
-

http/iot/apc-ups-login.yaml

@@ -28,6 +28,4 @@ http:
 
       - type: status
         status:
-          - 200
+          - 200
-
-

http/iot/contacam.yaml

@@ -25,8 +25,7 @@ http:
         words:
           - '<title>ContaCam</title>'
         part: body
+
       - type: status
         status:
-          - 200
+          - 200
-
-

http/iot/envision-gateway.yaml

@@ -28,6 +28,4 @@ http:
           - '<title>EnvisionGateway</title>'
       - type: status
         status:
-          - 200
+          - 200
-
-

http/iot/epmp-login.yaml

@@ -29,6 +29,4 @@ http:
 
       - type: status
         status:
-          - 200
+          - 200
-
-

http/iot/heatmiser-wifi-thermostat.yaml

@@ -28,6 +28,4 @@ http:
           - '<title>Heatmiser Wifi Thermostat</title>'
       - type: status
         status:
-          - 200
+          - 200
-
-

http/iot/hp-laserjet-detect.yaml

@@ -27,6 +27,4 @@ http:
         part: body
       - type: status
         status:
-          - 200
+          - 200
-
-

http/iot/internet-service.yaml

@@ -28,6 +28,4 @@ http:
           - '<title>Internet Services</title>'
       - type: status
         status:
-          - 200
+          - 200
-
-

http/iot/iotawatt-app-exposure.yaml

@@ -32,6 +32,4 @@ http:
 
       - type: status
         status:
-          - 200
+          - 200
-
-

http/iot/liveview-axis-camera.yaml

@@ -46,6 +46,4 @@ http:
         part: body
         group: 1
         regex:
-          - 'AXIS (.*) Network Camera</title>'
+          - 'AXIS (.*) Network Camera</title>'
-
-

http/iot/mobotix-guest-camera.yaml

@@ -24,8 +24,7 @@ http:
       - type: word
         words:
           - 'MOBOTIX'
+
       - type: status
         status:
-          - 200
+          - 200
-
-

http/iot/netsurveillance-web.yaml

@@ -30,6 +30,4 @@ http:
 
       - type: status
         status:
-          - 200
+          - 200
-
-

http/iot/novus-ip-camera.yaml

@@ -35,6 +35,4 @@ http:
 
       - type: status
         status:
-          - 200
+          - 200
-
-

http/iot/nuuno-network-login.yaml

@@ -29,6 +29,4 @@ http:
 
       - type: status
         status:
-          - 200
+          - 200
-
-

http/iot/octoprint-3dprinter-detect.yaml

@@ -32,6 +32,4 @@ http:
 
       - type: status
         status:
-          - 200
+          - 200
-
-

http/iot/routeros-login.yaml

@@ -33,6 +33,4 @@ http:
       - type: regex
         group: 1
         regex:
-          - '<h1>RouterOS v(.+)<\/h1>'
+          - '<h1>RouterOS v(.+)<\/h1>'
-
-

http/iot/targa-camera-lfi.yaml

@@ -29,6 +29,4 @@ http:
 
       - type: status
         status:
-          - 200
+          - 200
-
-

http/iot/webcamxp-5.yaml

@@ -28,6 +28,4 @@ http:
           - '<title>webcamXP 5</title>'
       - type: status
         status:
-          - 200
+          - 200
-
-

http/takeovers/aftership-takeover.yaml

@@ -24,6 +24,4 @@ http:
 
       - type: word
         words:
-          - Oops.</h2><p class="text-muted text-tight">The page you're looking for doesn't exist.
+          - Oops.</h2><p class="text-muted text-tight">The page you're looking for doesn't exist.
-
-

http/takeovers/agilecrm-takeover.yaml

@@ -24,6 +24,4 @@ http:
 
       - type: word
         words:
-          - Sorry, this page is no longer available.
+          - Sorry, this page is no longer available.
-
-

http/takeovers/aha-takeover.yaml

@@ -24,6 +24,4 @@ http:
 
       - type: word
         words:
-          - There is no portal here ... sending you back to Aha!
+          - There is no portal here ... sending you back to Aha!
-
-