Merge pull request #4902 from Leovalcante/fix/drupal-user-enum-redirect

Fix Drupal user enum redirect template
patch-1
Prince Chaddha 2022-07-24 22:09:55 +05:30 committed by GitHub
commit 90b70d57ac
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 3 deletions

View File

@ -1,10 +1,13 @@
id: drupal-user-enum-redirect
info:
name: Drupal User Enumration [Redirect]
name: Drupal User Enumeration [Redirect]
author: 0w4ys
severity: info
tags: drupal
metadata:
verified: true
shodan-query: http.component:"Drupal"
tags: drupal,misconfig
requests:
- method: GET
@ -19,7 +22,7 @@ requests:
matchers:
- type: regex
regex:
- '(?i)Location: http(s|):\/\/[\w\.\-]+(\/ar|\/en|)\/users\/\w+'
- '(?i)Location: https?:\/\/[\w\.\-]+[:\/\w-]*\/users\/\w+'
part: header
- type: status