Updated elmah-log-file.yaml

Updated redirect, description and reference
patch-1
idealphase 2022-11-21 14:09:24 +07:00 committed by GitHub
parent 43e1737ffd
commit a24abbbc12
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 2 deletions

View File

@ -2,15 +2,24 @@ id: elmah-log-file
info: info:
name: elmah.axd Disclosure name: elmah.axd Disclosure
author: shine author: shine, idealphase
severity: medium severity: medium
description: |
ELMAH (Error Logging Modules and Handlers) is an application-wide error logging facility that is completely pluggable. It can be dynamically added to a running ASP.NET web application, or even all ASP.NET web applications on a machine, without any need for re-compilation or re-deployment.
reference:
- https://code.google.com/archive/p/elmah/
- https://www.troyhunt.com/aspnet-session-hijacking-with-google/
tags: logs,exposure tags: logs,exposure
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/elmah.axd" - "{{BaseURL}}/elmah.axd"
- "{{BaseURL}}/elmah"
stop-at-first-match: true
host-redirects: true
max-redirects: 2
matchers-condition: and matchers-condition: and
matchers: matchers:
@ -20,4 +29,4 @@ requests:
- type: status - type: status
status: status:
- 200 - 200