Update syntax

patch-1
Fabian Affolter 2020-05-25 10:13:15 +02:00
parent cd21b2533e
commit a9330e20c0
No known key found for this signature in database
GPG Key ID: E23CD2DD36A4397F
15 changed files with 25 additions and 25 deletions

View File

@ -19,7 +19,6 @@ requests:
- "{{BaseURL}}/typo3/phpmyadmin/"
- "{{BaseURL}}/web/phpmyadmin/"
- "{{BaseURL}}/xampp/phpmyadmin/"
matchers:
- type: word
words:

View File

@ -14,5 +14,5 @@ requests:
matchers:
- type: word
words:
- 'Access-Control-Allow-Origin: https://evil.com'
- "Access-Control-Allow-Origin: https://evil.com"
part: header

View File

@ -4,7 +4,8 @@ info:
name: FrontPage configuration information discloure
author: JTeles
severity: low
#Reference => https://docs.microsoft.com/en-us/archive/blogs/fabdulwahab/security-protecting-sharepoint-server-applications
# reference: https://docs.microsoft.com/en-us/archive/blogs/fabdulwahab/security-protecting-sharepoint-server-applications
requests:
- method: GET
path:

View File

@ -15,7 +15,7 @@ requests:
matchers:
- type: word
words:
- 'signup.validation.errors'
- "signup.validation.errors"
- type: status
status:
- 400

View File

@ -38,19 +38,19 @@ requests:
- type: regex
part: body
regex:
- 'method'
- 'spring'
- 'TYPE'
- 'system'
- 'database'
- 'cron'
- "method"
- "spring"
- "TYPE"
- "system"
- "database"
- "cron"
condition: or
- type: status
status:
- 200
- type: word
words:
- 'application/json'
- 'hprof'
- "application/json"
- "hprof"
condition: or
part: header

View File

@ -8,8 +8,8 @@ info:
# Update this list with new takeovers matchers
# Do not delete other template files for takeover
# https://github.com/EdOverflow/can-i-take-over-xyz
# You need to claim the cname the subdomain to confirm the takeover.
# Do not report this without claiming the cname.
# You need to claim the CNAME the subdomain to confirm the takeover.
# Do not report this without claiming the CNAME.
requests:
- method: GET