basic xss

2020-05-10 17:16:12 +02:00 · 2020-05-10 17:16:12 +02:00 · 8ca66bd66d
parent b72489445c
commit 8ca66bd66d
1 changed files with 19 additions and 0 deletions
--- a/noisy/general-xss.yaml
+++ b/noisy/general-xss.yaml
@ -0,0 +1,19 @@
+id: General XSS
+
+info:
+  name: General XSS
+  author: nadino
+  severity: medium
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+    matchers:
+      - type: word
+        words:
+          - '"><injectable>'
+        part: body
+      - type: dsl
+        dsl:
+        - 'contains(content_type,"html")'