Update crlf-injection.yaml

2020-05-24 14:22:35 +02:00 · 2020-05-24 14:22:35 +02:00 · 8b6bd2f717
parent 7c6fca1900
commit 8b6bd2f717
1 changed files with 4 additions and 3 deletions
--- a/vulnerabilities/crlf-injection.yaml
+++ b/vulnerabilities/crlf-injection.yaml
@ -11,6 +11,7 @@ requests:
      - "{{BaseURL}}/%0D%0ASet-Cookie:crlfinjection=crlfinjection"
      - "{{BaseURL}}/%E5%98%8D%E5%98%8ASet-Cookie:crlfinjection=crlfinjection" #unicode bypass
    matchers:
-      - type: dsl
-        dsl:
-        - 'contains(set_cookie,"crlfinjection")'
+      - type: regex
+        regex:
+        - "(^Set-Cookie:|;(| ))( |)crlfinjection=crlfinjection($|;)"
+        part: header