diff --git a/technologies/dwr-test-page-detect.yaml b/technologies/dwr-index-detect.yaml
similarity index 61%
rename from technologies/dwr-test-page-detect.yaml
rename to technologies/dwr-index-detect.yaml
index 1c54adf5ca..35ec814ac3 100644
--- a/technologies/dwr-test-page-detect.yaml
+++ b/technologies/dwr-index-detect.yaml
@@ -1,28 +1,27 @@
-id: dwr-test-page-detect
+id: dwr-index-detect
info:
- name: DWR detact test page detection
+ name: DWR detect test page detection
author: pussycat0x
severity: low
description: The index contains the list of exposed Java classes. From here one can navigate to the test page of each class where every callable method is described and can be easily tested. This is a great way to find out what methods are exposed and learn how they function.
+ reference: http://aetherlab.net/2012/09/experiences-in-pentesting-dwr/
metadata:
- google-dork: inurl:"/dwr/index.html"
- reference:
- - http://aetherlab.net/2012/09/experiences-in-pentesting-dwr/
- tags: tech, default
+ google-dork: intitle:"DWR Test Index"
+ tags: tech,misconfig,dwr
requests:
- method: GET
path:
- '{{BaseURL}}/dwr/index.html'
- - '{{BaseURL}}/dwr/dwr/index.html'
+
matchers-condition: and
matchers:
- type: word
- words:
- - "DWR Test Index"
part: body
- condition: and
+ words:
+ - "DWR Test Index"
+
- type: status
status:
- 200