Update and rename dwr-test-page-detect.yaml to dwr-index-detect.yaml

2021-11-27 10:43:57 +04:00 · 2021-11-27 10:43:57 +04:00 · c142b17ef7
parent 8debecb4fa
commit c142b17ef7
1 changed files with 9 additions and 10 deletions
--- a/technologies/dwr-test-page-detect.yaml
+++ b/technologies/dwr-test-page-detect.yaml
@ -1,28 +1,27 @@
-id: dwr-test-page-detect
+id: dwr-index-detect

 info:
-  name: DWR detact test page detection
+  name: DWR detect test page detection
  author: pussycat0x
  severity: low
  description: The index contains the list of exposed Java classes. From here one can navigate to the test page of each class where every callable method is described and can be easily tested. This is a great way to find out what methods are exposed and learn how they function.
+  reference: http://aetherlab.net/2012/09/experiences-in-pentesting-dwr/
  metadata:
-    google-dork: inurl:"/dwr/index.html"
-  reference:
-    - http://aetherlab.net/2012/09/experiences-in-pentesting-dwr/
-  tags: tech, default
+    google-dork: intitle:"DWR Test Index"
+  tags: tech,misconfig,dwr

 requests:
  - method: GET
    path:
      - '{{BaseURL}}/dwr/index.html'
-      - '{{BaseURL}}/dwr/dwr/index.html'
+
    matchers-condition: and
    matchers:
      - type: word
-        words:
-          - "<head><title>DWR Test Index</title></head>"
        part: body
-        condition: and
+        words:
+          - "<title>DWR Test Index</title>"
+
      - type: status
        status:
          - 200