daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update aws-bucket-takeover.yaml (#9691) 

Solves some false positives 

https://123seva-troubleshoot-admin.cn-hangzhou.alipay-cdn.aliyun-inc.com
https://123seva-omnigather-inner.cn-hangzhou.alipay-cdn.aliyun-inc.com
patch-2
Philippe Delteil 2024-05-03 06:01:46 -05:00 committed by GitHub
parent f63fc7169f
commit a993f5f6e8
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
http/takeovers/aws-bucket-takeover.yaml
View File

@ -31,6 +31,7 @@ http:
- type: dsl - type: dsl
dsl: dsl:
- contains(tolower(header), 'x-guploader-uploadid') - contains(tolower(header), 'x-guploader-uploadid')
- contains(tolower(header), "aliyunoss")
negative: true negative: true
- type: word - type: word
@ -77,4 +78,4 @@ http:
regex: regex:
- '<li>BucketName: (.*?)</li>' - '<li>BucketName: (.*?)</li>'
- '<BucketName>(.*?)</BucketName>' - '<BucketName>(.*?)</BucketName>'
# digest: 4a0a00473045022052c03d64bf92ed3e2156360f7da406ef950a4292a8d29b08de54d645483122e1022100a8172443bfd3c3b235f40e2963f3f37d538106e9004629cd1393c789bfb7983c:922c64590222798bb761d5b6d8e72950 # digest: 4a0a00473045022052c03d64bf92ed3e2156360f7da406ef950a4292a8d29b08de54d645483122e1022100a8172443bfd3c3b235f40e2963f3f37d538106e9004629cd1393c789bfb7983c:922c64590222798bb761d5b6d8e72950