From 8ca66bd66d1946b5a73108af75f487d14e72dd2b Mon Sep 17 00:00:00 2001 From: Andrea Date: Sun, 10 May 2020 17:16:12 +0200 Subject: [PATCH] basic xss --- noisy/general-xss.yaml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 noisy/general-xss.yaml diff --git a/noisy/general-xss.yaml b/noisy/general-xss.yaml new file mode 100644 index 0000000000..1a1d45a176 --- /dev/null +++ b/noisy/general-xss.yaml @@ -0,0 +1,19 @@ +id: General XSS + +info: + name: General XSS + author: nadino + severity: medium + +requests: + - method: GET + path: + - "{{BaseURL}}" + matchers: + - type: word + words: + - '">' + part: body + - type: dsl + dsl: + - 'contains(content_type,"html")'