Update easycvr-info-leak.yaml

2024-06-05 10:24:27 +05:30 · 2024-06-05 10:24:27 +05:30 · b1dff1a023
parent 48c2ad8167
commit b1dff1a023
1 changed files with 17 additions and 0 deletions
--- a/http/vulnerabilities/other/easycvr-info-leak.yaml
+++ b/http/vulnerabilities/other/easycvr-info-leak.yaml
@ -12,11 +12,28 @@ info:
    fofa-query: title="EasyCVR"
  tags: unauth,easycvr,misconfig

+flow: http(1) && http(2)
+
 http:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "<title>EasyCVR"
+
+      - type: status
+        status:
+          - 200
+
  - method: GET
    path:
      - "{{BaseURL}}/api/v1/userlist?pageindex=0&pagesize=10"

+    matchers-condition: and
    matchers:
      - type: word
        words: