lint fix
parent
473da20eb8
commit
932d001ed8
|
@ -56,11 +56,11 @@ http:
|
||||||
- "wp-json/wp/v2/users?"
|
- "wp-json/wp/v2/users?"
|
||||||
- "?rest_route=/wp/v2/users&"
|
- "?rest_route=/wp/v2/users&"
|
||||||
attack: clusterbomb
|
attack: clusterbomb
|
||||||
|
|
||||||
matchers:
|
matchers:
|
||||||
- type: dsl
|
- type: dsl
|
||||||
dsl:
|
dsl:
|
||||||
- 'status_code == 200'
|
- 'status_code == 200'
|
||||||
- 'contains(content_type, "application/json")'
|
- 'contains(content_type, "application/json")'
|
||||||
- 'contains_all(body, "[{\"id", "name\":", "@")'
|
- 'contains_all(body, "[{\"id", "name\":", "@")'
|
||||||
condition: and
|
condition: and
|
|
@ -1,7 +1,7 @@
|
||||||
id: wp-footnote-xss
|
id: wp-footnote-xss
|
||||||
|
|
||||||
info:
|
info:
|
||||||
name: WordPress 6.3-6.3.1 Footnotes Block - Cross-Site Scripting
|
name: WordPress 6.3-6.3.1 Footnotes Block - Cross-Site Scripting
|
||||||
author: nqdung2002
|
author: nqdung2002
|
||||||
severity: medium
|
severity: medium
|
||||||
description: |
|
description: |
|
||||||
|
@ -66,7 +66,7 @@ http:
|
||||||
- 'contains(body_4, "<script>alert(document.domain)</script>")'
|
- 'contains(body_4, "<script>alert(document.domain)</script>")'
|
||||||
- 'contains(header_4, "text/html")'
|
- 'contains(header_4, "text/html")'
|
||||||
condition: and
|
condition: and
|
||||||
|
|
||||||
extractors:
|
extractors:
|
||||||
- type: regex
|
- type: regex
|
||||||
name: postid
|
name: postid
|
||||||
|
|
Loading…
Reference in New Issue