patch-12
Ritik Chaddha 2024-10-18 17:09:05 +05:30
parent 473da20eb8
commit 932d001ed8
2 changed files with 4 additions and 4 deletions

View File

@ -56,11 +56,11 @@ http:
- "wp-json/wp/v2/users?" - "wp-json/wp/v2/users?"
- "?rest_route=/wp/v2/users&" - "?rest_route=/wp/v2/users&"
attack: clusterbomb attack: clusterbomb
matchers: matchers:
- type: dsl - type: dsl
dsl: dsl:
- 'status_code == 200' - 'status_code == 200'
- 'contains(content_type, "application/json")' - 'contains(content_type, "application/json")'
- 'contains_all(body, "[{\"id", "name\":", "@")' - 'contains_all(body, "[{\"id", "name\":", "@")'
condition: and condition: and

View File

@ -1,7 +1,7 @@
id: wp-footnote-xss id: wp-footnote-xss
info: info:
name: WordPress 6.3-6.3.1 Footnotes Block - Cross-Site Scripting name: WordPress 6.3-6.3.1 Footnotes Block - Cross-Site Scripting
author: nqdung2002 author: nqdung2002
severity: medium severity: medium
description: | description: |
@ -66,7 +66,7 @@ http:
- 'contains(body_4, "<script>alert(document.domain)</script>")' - 'contains(body_4, "<script>alert(document.domain)</script>")'
- 'contains(header_4, "text/html")' - 'contains(header_4, "text/html")'
condition: and condition: and
extractors: extractors:
- type: regex - type: regex
name: postid name: postid