matcher update

patch-1
Prince Chaddha 2021-05-18 22:26:34 +05:30
parent a03a086784
commit a6059be7ce
2 changed files with 13 additions and 5 deletions

View File

@ -9,17 +9,25 @@ info:
- https://docs.magento.com/user-guide/stores/store-urls-custom-admin.html
tags: magento
# There might be a better way and I don't know if it will always return a 302 or set an admin cookie
requests:
- method: GET
path:
- '{{BaseURL}}/admin'
redirects: true
max-redirects: 2
cookie-reuse: true
matchers-condition: and
matchers:
- type: status
status:
- 302
- 200
- type: dsl
dsl:
- contains(tolower(all_headers), 'admin=') # Set-Cookie: admin=nfocvc2vj376c28red2o6aukpe; e
part: header
- contains(tolower(all_headers), 'admin=')
part: header
- type: word
words:
- "<title>Magento Admin</title>"
part: body

View File

@ -4,7 +4,7 @@ info:
name: "MAGMI (Magento Mass Importer) Plugin Detect"
author: "dwisiswant0"
severity: "info"
tags: magento
tags: magento,magmi
requests:
- method: GET