daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update syntax

patch-1
Fabian Affolter 2020-05-25 10:13:15 +02:00
parent cd21b2533e
commit a9330e20c0
No known key found for this signature in database
GPG Key ID: E23CD2DD36A4397F
15 changed files with 25 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
panels/cisco-asa-panel.yaml
View File

@ -12,5 +12,5 @@ requests:
matchers:
- type: word
words:
- "<title>SSL VPN Service</title>"
- "<title>SSL VPN Service</title>"
part: body

2
panels/globalprotect-panel.yaml
View File

@ -12,4 +12,4 @@ requests:
matchers:
- type: word
words:
- "<title>GlobalProtect Portal</TITLE>"
- "<title>GlobalProtect Portal</TITLE>"

2
panels/grafana-detect.yaml
View File

@ -12,5 +12,5 @@ requests:
matchers:
- type: word
words:
- "<title>Grafana</title>"
- "<title>Grafana</title>"
part: body

2
panels/jenkins-asyncpeople.yaml
View File

@ -12,5 +12,5 @@ requests:
matchers:
- type: word
words:
- "<title>People - [Jenkins]</title>"
- "<title>People - [Jenkins]</title>"
part: body

1
panels/phpmyadmin-panel.yaml
View File

@ -19,7 +19,6 @@ requests:
- "{{BaseURL}}/typo3/phpmyadmin/"
- "{{BaseURL}}/web/phpmyadmin/"
- "{{BaseURL}}/xampp/phpmyadmin/"
matchers:
- type: word
words:

2
panels/sap-netweaver-detect.yaml
View File

@ -13,5 +13,5 @@ requests:
matchers:
- type: word
words:
- "<title>SAP&#x20;NetWeaver&#x20;Portal</title>"
- "<title>SAP&#x20;NetWeaver&#x20;Portal</title>"
part: body

2
panels/supervpn-panel.yaml
View File

@ -12,5 +12,5 @@ requests:
matchers:
- type: word
words:
- "<title>Sign In-SuperVPN</title>"
- "<title>Sign In-SuperVPN</title>"
part: body

4
panels/swagger-panel.yaml
View File

@ -7,7 +7,7 @@ info:
requests:
- method: GET
path:
path:
- "{{BaseURL}}/swagger/index.html"
- "{{BaseURL}}/swagger-ui.html"
- "{{BaseURL}}/swagger/swagger-ui.html"
@ -17,7 +17,7 @@ requests:
- "{{BaseURL}}/swagger/v1/swagger.json"
matchers:
- type: word
words:
words:
- "\"swagger\":"
- "Swagger UI"
condition: or

2
security-misconfiguration/basic-cors-flash.yaml
View File

@ -12,5 +12,5 @@ requests:
matchers:
- type: word
words:
- 'allow-access-from domain="*"'
- 'allow-access-from domain="*"'
part: body

2
security-misconfiguration/basic-cors.yaml
View File

@ -14,5 +14,5 @@ requests:
matchers:
- type: word
words:
- 'Access-Control-Allow-Origin: https://evil.com'
- "Access-Control-Allow-Origin: https://evil.com"
part: header

3
security-misconfiguration/front-page-misconfig.yaml
View File

@ -4,7 +4,8 @@ info:
name: FrontPage configuration information discloure
author: JTeles
severity: low
#Reference => https://docs.microsoft.com/en-us/archive/blogs/fabdulwahab/security-protecting-sharepoint-server-applications
# reference: https://docs.microsoft.com/en-us/archive/blogs/fabdulwahab/security-protecting-sharepoint-server-applications
requests:
- method: GET
path:

4
security-misconfiguration/jira-service-desk-signup.yaml
View File

@ -4,7 +4,7 @@ info:
name: Jira Service Desk Signup
author: TechbrunchFR
severity: medium
requests:
- method: POST
path:
@ -15,7 +15,7 @@ requests:
matchers:
- type: word
words:
- 'signup.validation.errors'
- "signup.validation.errors"
- type: status
status:
- 400

16
security-misconfiguration/springboot-detect.yaml
View File

@ -38,19 +38,19 @@ requests:
- type: regex
part: body
regex:
- 'method'
- 'spring'
- 'TYPE'
- 'system'
- 'database'
- 'cron'
- "method"
- "spring"
- "TYPE"
- "system"
- "database"
- "cron"
condition: or
- type: status
status:
- 200
- type: word
words:
- 'application/json'
- 'hprof'
- "application/json"
- "hprof"
condition: or
part: header

4
subdomain-takeover/detect-all-takeovers.yaml
View File

@ -8,8 +8,8 @@ info:
# Update this list with new takeovers matchers
# Do not delete other template files for takeover
# https://github.com/EdOverflow/can-i-take-over-xyz
# You need to claim the cname the subdomain to confirm the takeover.
# Do not report this without claiming the cname.
# You need to claim the CNAME the subdomain to confirm the takeover.
# Do not report this without claiming the CNAME.
requests:
- method: GET

2
subdomain-takeover/worksites-takeover.yaml
View File

@ -12,5 +12,5 @@ requests:
matchers:
- type: regex
regex:
- "(?:Company Not Found|you&rsquo;re looking for doesn&rsquo;t exist)"
- "(?:Company Not Found|you&rsquo;re looking for doesn&rsquo;t exist)"
part: body