Document update about multiple matchers

patch-1
bauthard 2020-04-24 17:37:45 +05:30 committed by GitHub
parent 769edc1b28
commit 84a6e61520
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 31 additions and 0 deletions

View File

@ -21,6 +21,7 @@ Table of Contents
* [<strong>Types</strong>](#types) * [<strong>Types</strong>](#types)
* [<strong>Conditions</strong>](#conditions) * [<strong>Conditions</strong>](#conditions)
* [<strong>Matched Parts</strong>](#matched-parts) * [<strong>Matched Parts</strong>](#matched-parts)
* [<strong>Multiple Matchers</strong>](#multiple-matchers)
* [Extractors](#extractors) * [Extractors](#extractors)
* [<strong>Example Template</strong>](#example-template) * [<strong>Example Template</strong>](#example-template)
@ -199,6 +200,36 @@ matcher:
Similarly, matchers can be written to match anything that you want to find in the response body allowing unlimited creativity and extensibility. Similarly, matchers can be written to match anything that you want to find in the response body allowing unlimited creativity and extensibility.
##### **Multiple Matchers**
Multiple matchers can be used in a single template to fingerprint multiple conditions with a single request.
Here is an example of syntax for multiple matchers.
```yaml
matchers:
- type: word
name: php
words:
- "X-Powered-By: PHP"
- "PHPSESSID"
part: header
- type: word
name: node
words:
- "Server: NodeJS"
- "X-Powered-By: nodejs"
condition: or
part: header
- type: word
name: python
words:
- "Python/2."
- "Python/3."
condition: or
part: header
```
#### Extractors #### Extractors
Extractors are another important feature of nuclei. Extractors can be used to extract and display in results a match from the response body or headers based on a regular expression. Extractors are another important feature of nuclei. Extractors can be used to extract and display in results a match from the response body or headers based on a regular expression.