From a6059be7cedca7e5916005584d73dbd9bc515243 Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Tue, 18 May 2021 22:26:34 +0530 Subject: [PATCH] matcher update --- exposed-panels/magento-admin-panel.yaml | 16 ++++++++++++---- technologies/magmi-detect.yaml | 2 +- 2 files changed, 13 insertions(+), 5 deletions(-) diff --git a/exposed-panels/magento-admin-panel.yaml b/exposed-panels/magento-admin-panel.yaml index f623c7a640..4d70320ee5 100644 --- a/exposed-panels/magento-admin-panel.yaml +++ b/exposed-panels/magento-admin-panel.yaml @@ -9,17 +9,25 @@ info: - https://docs.magento.com/user-guide/stores/store-urls-custom-admin.html tags: magento -# There might be a better way and I don't know if it will always return a 302 or set an admin cookie requests: - method: GET path: - '{{BaseURL}}/admin' + + redirects: true + max-redirects: 2 + cookie-reuse: true + matchers-condition: and matchers: - type: status status: - - 302 + - 200 - type: dsl dsl: - - contains(tolower(all_headers), 'admin=') # Set-Cookie: admin=nfocvc2vj376c28red2o6aukpe; e - part: header \ No newline at end of file + - contains(tolower(all_headers), 'admin=') + part: header + - type: word + words: + - "Magento Admin" + part: body \ No newline at end of file diff --git a/technologies/magmi-detect.yaml b/technologies/magmi-detect.yaml index e45dade5e1..53210b89ff 100644 --- a/technologies/magmi-detect.yaml +++ b/technologies/magmi-detect.yaml @@ -4,7 +4,7 @@ info: name: "MAGMI (Magento Mass Importer) Plugin Detect" author: "dwisiswant0" severity: "info" - tags: magento + tags: magento,magmi requests: - method: GET